9.1
CVE-2015-7921
- EPSS 0.41%
- Veröffentlicht 06.04.2016 23:59:02
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
LoginThe FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Proface Gp-pro Ex Ex-ed Version <= 4.0.4
Schneider-electric ≫ Proface Gp-pro Ex Pfxexedls Version <= 4.0.4
Schneider-electric ≫ Proface Gp-pro Ex Pfxexedv Version <= 4.0.4
Schneider-electric ≫ Proface Gp-pro Ex Pfxexgrpls Version <= 4.0.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.41% | 0.58 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
| nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:P/I:P/A:N
|