Back to feed
EUVD-2015-7819 · Published Apr 6, 2016
The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials.
Technologies
Schneider-Electric Proface Gp-Pro Ex PfxexedvSchneider-Electric Proface Gp-Pro Ex Ex-EdSchneider-Electric Proface Gp-Pro Ex PfxexedlsSchneider-Electric Proface Gp-Pro Ex Pfxexgrpls
Weaknesses
CWE-255
CVSS scores
- v3.19.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - v2.06.4
AV:N/AC:L/Au:N/C:P/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
