Vulnerability · Published Oct 2, 2024 · Assigned by CERTVDE
CVE-2024-35294Schneider Elektronik Series 700 prone to missing authentication for traffic capture function
Medium 6.5
In plain English
A medium-severity missing authentication in Series 700 from Schneider Elektronik. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.5%top 58.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schneider Elektronik | Series 700 | 0.0.0.0 – through 0.1.17.6 |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N