Hardcoded credentials

2015-01-2719:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.7%

JSON

The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.

CPENameOperatorVersion
etg3000_factorycast_hmi_gateway_firmwarele1.60.4

CPE	Name	Operator	Version
	etg3000_factorycast_hmi_gateway_firmware	le	1.60.4

References

www.securityfocus.com/bid/72258

www.securityfocus.com/bid/77765

ics-cert.us-cert.gov/advisories/ICSA-15-020-02