CVE-2015-7921

9.1 criticalEPSS 2.0%

The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-255
Published: 2016-04-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

schneider-electric:proface_gp-pro_ex_ex-ed
schneider-electric:proface_gp-pro_ex_pfxexedls
schneider-electric:proface_gp-pro_ex_pfxexedv
schneider-electric:proface_gp-pro_ex_pfxexgrpls

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01
https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01

Check your stack JSON