CVE-2024-35294CWE-306
Schneider Elektronik Series 700 prone to missing authentication for traffic capture function
Medium · published October 2, 2024
What it is
An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00477 · 40.2th percentile
- Weakness
- CWE-306 · Missing Authentication for Critical Function
- Published
- 2024-10-02T10:07Z
EPSS history
Timeline