CVE-2014-6617

Published: Mar 9, 2018Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Softing FG-100 PB PROFIBUS firmware version FG-x00-PB_V2.02.0.00 contains a hardcoded password for the root account, which allows remote attackers to obtain administrative access via a TELNET session.

Affected (1)

Products: Industrial.softing: Fg 100 Pb Profibus Firmware

Industrial.softing

1 product

Fg 100 Pb Profibus Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Industrial.softing Fg 100 Pb Profibus Firmware	Version fg-x00-pb_v2.02.0.00

Running on/with	Platform Versions
Industrial.softing Fg 100 Pb Profibus	All versions

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (10)

http://packetstormsecurity.com/files/128976/Softing-FG-100-PB-Hardcoded-Backdoor.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/533902/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/70927

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/98512

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2014-005_softring_backdoor_account.txt

Source: cve@mitre.org

ExploitThird Party Advisory

http://packetstormsecurity.com/files/128976/Softing-FG-100-PB-Hardcoded-Backdoor.html