Lucene search
IcscertCVE-2014-9197HistoryJan 27, 2015 - 7:59 p.m.
CVE-2014-9197
2015-01-2719:59:00
CWE-284
icscert
web.nvd.nist.gov
28
cve-2014-9197
schneider electric
etg3000
factorycast
hmi gateway
firmware
access control
sensitive information
remote attackers
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.004
Percentile
73.3%
The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct request.
Affected configurations
Node
schneider-electricetg3000_factorycast_hmi_gateway_firmwareMatch1.60.2
schneider-electrictsxetg3000Match-
ORschneider-electrictsxetg3010Match-
ORschneider-electrictsxetg3021Match-
ORschneider-electrictsxetg3022Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| schneider-electric | etg3000_factorycast_hmi_gateway_firmware | 1.60.2 | cpe:2.3:o:schneider-electric:etg3000_factorycast_hmi_gateway_firmware:1.60.2:*:*:*:*:*:*:* |
| schneider-electric | tsxetg3000 | - | cpe:2.3:h:schneider-electric:tsxetg3000:-:*:*:*:*:*:*:* |
| schneider-electric | tsxetg3010 | - | cpe:2.3:h:schneider-electric:tsxetg3010:-:*:*:*:*:*:*:* |
| schneider-electric | tsxetg3021 | - | cpe:2.3:h:schneider-electric:tsxetg3021:-:*:*:*:*:*:*:* |
| schneider-electric | tsxetg3022 | - | cpe:2.3:h:schneider-electric:tsxetg3022:-:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2014-9197
2015-01-27 19:59:00
cvelist
cvelist
CVE-2014-9197
2015-01-27 11:00:00
prion
prion
Improper access control
2015-01-27 19:59:00
ics
ics
Schneider Electric ETG3000 FactoryCast HMI Gateway Vulnerabilities
2018-08-29 12:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.004
Percentile
73.3%
Related for CVE-2014-9197