Back to Database
Status published
Critical
CVE-2014-9198
Schneider Electric ETG3000 FactoryCast HMI Gateway Use of Hard-coded Credentials
Vulnerability Description
The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-9198
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Narendra Shinde of Qualys Security
More from Schneider Electric
View All →CVE-2025-9997
CWE-78: Improper Neutralization of Special Elements used in an OS...
Medium
5.8
CVE-2025-9996
CWE-78: Improper Neutralization of Special Elements used in an OS...
Medium
5.8
CVE-2025-8453
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege...
High
8.4
CVE-2025-7746
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...
Medium
5.3
CVE-2025-6788
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists...
Medium
5.3
Affected Vendor
Schneider Electric
View all reports →Affected Software
ETG3000 FactoryCast HMI Gateway
Vulnerable Versions:
TSXETG3000, TSXETG3010, TSXETG3021, TSXETG3022
Timeline
Official Publish:
January 27th, 2015
Last Modified:
September 5th, 2025
Added to House:
July 19th, 2026