---
cve: "CVE-2014-9198"
severity: "CRITICAL"
cvss: 10.0
epss: "4.2%"
vendor: "Schneider Electric"
kev: false
exploited: false
published: "2015-01-27 19:59:10"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-09-04T10:05:08+02:00"
---

# CVE-2014-9198

> 10.0 CRITICAL

## Beschreibung

The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.

## CVSS-Vektor

```
AV:N/AC:L/Au:N/C:C/I:C/A:C
```

## Referenzen

- <https://www.cisa.gov/news-events/ics-advisories/icsa-15-020-02>
- <http://www.securityfocus.com/bid/72258>
- <http://www.securityfocus.com/bid/77765>
- <https://ics-cert.us-cert.gov/advisories/ICSA-15-020-02>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2014-9198) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_