Vulnerability Details CVE-2015-7921
The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.1%
CVSS Severity
CVSS v3 Score 9.1
CVSS v2 Score 6.4
References
Products affected by CVE-2015-7921
-
cpe:2.3:a:schneider-electric:proface_gp-pro_ex_ex-ed:-
-
cpe:2.3:a:schneider-electric:proface_gp-pro_ex_ex-ed:4.0.4
-
cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexedls:-
-
cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexedls:4.0.4
-
cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexedv:-
-
cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexedv:4.0.4
-
cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexgrpls:-
-
cpe:2.3:a:schneider-electric:proface_gp-pro_ex_pfxexgrpls:4.0.4