The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials.
El servidor FTP en Pro-face GP-Pro EX EX-ED en versiones anteriores a 4.05.000, PFXEXEDV en versiones anteriores a 4.05.000, PFXEXEDLS en versiones anteriores a 4.05.000 y PFXEXGRPLS en versiones anteriores a 4.05.000 tiene credenciales embebidas, lo que facilita a atacantes remotos eludir la autenticación aprovechando el conocimiento de esas credenciales.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | NONE |
AV:N/AC:L/Au:N/C:P/I:P/A:N
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-255
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | proface_gp-pro_ex_ex-ed | * | <built-in method update of dict object at 0x7e60bbd60400> | Application |
| schneider-electric | proface_gp-pro_ex_pfxexedls | * | <built-in method update of dict object at 0x7e60a8a683c0> | Application |
| schneider-electric | proface_gp-pro_ex_pfxexedv | * | <built-in method update of dict object at 0x7e60a8a69c80> | Application |
| schneider-electric | proface_gp-pro_ex_pfxexgrpls | * | <built-in method update of dict object at 0x7e60bbd60500> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:proface_gp-pro_ex_ex-ed:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexedls:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexedv:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexgrpls:*:*:*:*:*:*:*:* |