CVE:CVE-2015-7921
CNNVD:CNNVD-201604-030
Pro-face GP-Pro EX是美国Pro-face公司的一套HMI画面编辑和逻辑编程软件。
Pro-face GP-Pro EX中存在安全漏洞，该漏洞源于FTP服务器使用硬编码的证书。远程攻击者可借助已知的证书利用该漏洞绕过身份验证。以下型号及版本受到影响：Pro-face GP-Pro EX EX-ED，PFXEXEDV，PFXEXEDLS，PFXEXGRPLS 1.00版本至4.0.4版本。
solution:Upgrade schneider-electric proface_gp-pro_ex_ex-ed to a higher version than 4.0.4,and avoid the version (,4.0.4]; Upgrade schneider-electric proface_gp-pro_ex_pfxexedls to a higher version than 4.0.4,and avoid the version (,4.0.4]; Upgrade schneider-electric proface_gp-pro_ex_pfxexedv to a higher version than 4.0.4,and avoid the version (,4.0.4]; Upgrade schneider-electric proface_gp-pro_ex_pfxexgrpls to a higher version than 4.0.4,and avoid the version (,4.0.4]