Security Advisory

CVE-2014-9197

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-01-27 11:00:00
Last updated 2025-09-05 21:19:01
Assigner icscert
CVSS score 10.0
State PUBLISHED

Description

The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct request.