3 matches found
Default credentials
The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, which makes it easier for remote attackers to bypass intended access restrictions via crafted configuration data...
CVE-2013-2762: Cross-Site Request Forgery (CSRF)
The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, which makes it easier for remote attackers to bypass intended access restrictions via crafted configuration data...
PT-2013-3915
Name of the Vulnerable Software and Affected Versions Schneider Electric Magelis XBT HMI controller affected versions not specified Description The issue concerns a default password used for authentication of configuration uploads, making it easier for remote attackers to bypass intended access...