CVE:CVE-2014-9197
CNNVD:CNNVD-201501-616
Schneider Electric ETG3000 FactoryCast HMI Gateway是法国施耐德电气（Schneider Electric）公司的一套基于Web的SCADA系统。
使用1.60 IR 04之前版本固件的Schneider Electric ETG3000 FactoryCast HMI Gateway中存在安全漏洞，该漏洞源于程序在web root目录下存储rde.jar文件时，没有执行充分的访问控制。远程攻击者可通过发送直接的请求利用该漏洞获取敏感的设置和配置信息。
solution:Upgrade schneider-electric etg3000_factorycast_hmi_gateway_firmware to a higher version than 1.60.2,and avoid the version 1.60.2; Upgrade schneider-electric tsxetg3000 to a higher version than -; Upgrade schneider-electric tsxetg3010 to a higher version than -; Upgrade schneider-electric tsxetg3021 to a higher version than -; Upgrade schneider-electric tsxetg3022 to a higher version than -