← CVE Intelligence

CVE-2014-9197

Schneider Electric ETG3000 FactoryCast HMI Gateway Missing Authentication for Critical Function PUBLISHED

Description (CNA)

The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct request.

Affected (CNA)

Vendor / productVersions
Schneider Electric / ETG3000 FactoryCast HMI Gatewayaffected TSXETG3000; affected TSXETG3010; affected TSXETG3021; affected TSXETG3022

CWE

CWE-306

References

ADP enrichment

CVE

No English description supplied.