EcoStruxure IT Gateway Hard-Coded Credentials Vulnerability (CVE-2024-0865)

This document details a high-severity vulnerability (CVE-2024-0865) in EcoStruxure IT Gateway versions 1.20.x and prior, involving hard-coded credentials that could lead to local privilege escalation and database compromise. It provides remediation steps, including upgrading to version 1.21, and offers mitigations such as restricting non-administrative users and following cybersecurity best practices.