CVE-2014-9197
HighSummary
The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before version 1.60 IR 04 stores rde.jar under the web root with insufficient access control, allowing remote attackers to obtain sensitive configuration information.
Risk Assessment
Attackers may gain access to sensitive information, potentially leading to unauthorized configuration changes and operational disruptions.
Recommendation
It is recommended to update the firmware to version 1.60 IR 04 or later and implement proper access control mechanisms for files in the web root.
Other vulnerabilities in Schneider Electric ETG3000 FactoryCast HMI Gateway
Original NVD description (English source)
The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct request.