CVE-2015-7921: Schneider Electric Proface Gp-Pro Ex Ex-Ed

Critical severity, CVSS 9.1. EPSS: 2% chance of exploitation in the next 30 days.

The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials.

Affected products

• Schneider Electric Proface Gp-Pro Ex Ex-Ed: up to and including 4.0.4
• Schneider Electric Proface Gp-Pro Ex Pfxexedls: up to and including 4.0.4
• Schneider Electric Proface Gp-Pro Ex Pfxexedv: up to and including 4.0.4
• Schneider Electric Proface Gp-Pro Ex Pfxexgrpls: up to and including 4.0.4

Published 2016-04-06. Last modified 2026-06-17.