Skip to content
OpenAdvisories

Archive

27 January 2015

Vulnerabilities first published on this day (UTC), newest first.

← December 2014 2015 / January /27 February 2015 →
  1. 134
  2. 233
  3. 39
  4. 47
  5. 517
  6. 66
  7. 713
  8. 816
  9. 929
  10. 1017
  11. 11 
  12. 126
  13. 1394
  14. 1418
  15. 1538
  16. 1635
  17. 1714
  18. 183
  19. 19 
  20. 209
  21. 21164
  22. 2236
  23. 2311
  24. 24 
  25. 25 
  26. 2610
  27. 2728
  28. 289
  29. 2910
  30. 3047
  31. 31 
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2014-9198

    Schneider Electric ETG3000 FactoryCast HMI Gateway Use of Hard-coded Credentials

    The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.

    Schneider Electric ETG3000 FactoryCast HMI Gateway ICS / OT
  • Critical 10.0
    CVE-2014-9197

    Schneider Electric ETG3000 FactoryCast HMI Gateway Missing Authentication for Critical Function

    The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct reque…

    Schneider Electric ETG3000 FactoryCast HMI Gateway ICS / OT