Skip to content
OpenAdvisories
Critical ICSA-15-020-02 2 CVEs

Schneider Electric ETG3000 FactoryCast HMI Gateway Vulnerabilities

Published Oct 23, 2015 · Updated Jun 6, 2025 · Revision 2

Vendor: Schneider Electric Product: TSXETG3000 Product: TSXETG3010 Product: TSXETG3021 Product: TSXETG3022

Vulnerabilities 2

  • Critical 10.0
    CVE-2014-9197

    Schneider Electric ETG3000 FactoryCast HMI Gateway Missing Authentication for Critical Function

    The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct reque…

    Schneider Electric ETG3000 FactoryCast HMI Gateway ICS / OT
  • Critical 10.0
    CVE-2014-9198

    Schneider Electric ETG3000 FactoryCast HMI Gateway Use of Hard-coded Credentials

    The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.

    Schneider Electric ETG3000 FactoryCast HMI Gateway ICS / OT

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References