CVE-2014-6617

Softing FG-100 PB PROFIBUS firmware version FG-x00-PB_V2.02.0.00 contains a hardcoded password for the root account, which allows remote attackers to obtain administrative access via a TELNET session.

• CWE-798

• http://packetstormsecurity.com/files/128976/Softing-FG-100-PB-Hardcoded-Backdoor.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/533902/100/0/threaded
• http://www.securityfocus.com/bid/70927Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98512Third Party Advisory, VDB Entry
• https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2014-005_softring_backdoor_account.txtExploit, Third Party Advisory
• http://packetstormsecurity.com/files/128976/Softing-FG-100-PB-Hardcoded-Backdoor.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/533902/100/0/threaded
• http://www.securityfocus.com/bid/70927Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98512Third Party Advisory, VDB Entry
• https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2014-005_softring_backdoor_account.txtExploit, Third Party Advisory

Published

Mar 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-6604Cross-site scripting (XSS) vulnerability in class-s2-list-ta…
• CVE-2014-6607M/Monit 3.3.2 and earlier does not verify the original passw…
• CVE-2014-6609The res_pjsip_pubsub module in Asterisk Open Source 12.x bef…
• CVE-2014-6610Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.…
• CVE-2014-6611The BlackBerry World app before 5.0.0.262 on BlackBerry 10 O…
• CVE-2014-6616Cross-site scripting (XSS) vulnerability in Softing FG-100 P…
• CVE-2014-6618Cross-site scripting (XSS) vulnerability in Your Online Shop…
• CVE-2014-6619Multiple cross-site scripting (XSS) vulnerabilities in regis…
• CVE-2014-6620Cross-site scripting (XSS) vulnerability in Aruba Networks C…
• CVE-2014-6621Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1…
• CVE-2014-6622Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1…
• CVE-2014-6623Cross-site request forgery (CSRF) vulnerability in the Insig…