CVE Catalog
CVE-2015-7921
CriticalSummary
The FTP server in Pro-face GP-Pro EX EX-ED before version 4.05.000 has hardcoded credentials, allowing remote attackers to bypass authentication.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the system, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update the software to the latest version to remove hardcoded credentials and implement additional security measures.
Original NVD description (English source)
The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials.