Vulnerability · Published Oct 2, 2024 · Assigned by CERTVDE
CVE-2024-35293Schneider Elektronik Series 700 prone to missing authentication for critical reset function
Critical 9.1
In plain English
A critical-severity missing authentication in Series 700 from Schneider Elektronik. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.6%top 49.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An unauthenticated remote attacker may use a missing authentication for critical function vulnerability to reboot or erase the affected devices resulting in data loss and/or a DoS.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schneider Elektronik | Series 700 | 0.0.0.0 – through 0.1.17.6 |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H