9.1
CVE-2015-7921
- EPSS 0.41%
- Published 06.04.2016 23:59:02
- Last modified 12.04.2025 10:46:40
- Source ics-cert@hq.dhs.gov
- Teams watchlist Login
- Open Login
The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials.
Data is provided by the National Vulnerability Database (NVD)
Schneider-electric ≫ Proface Gp-pro Ex Ex-ed Version <= 4.0.4
Schneider-electric ≫ Proface Gp-pro Ex Pfxexedls Version <= 4.0.4
Schneider-electric ≫ Proface Gp-pro Ex Pfxexedv Version <= 4.0.4
Schneider-electric ≫ Proface Gp-pro Ex Pfxexgrpls Version <= 4.0.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.41% | 0.58 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
| nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:P/I:P/A:N
|