CVE-2024-35294CWE-306

Schneider Elektronik Series 700 prone to missing authentication for traffic capture function

Medium · published October 2, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
40.2
In the wild
Unconfirmed
What it is

An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00477 · 40.2th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2024-10-02T10:07Z
EPSS history
Timeline
  • 02 OCT 10:07Z
    Schneider Elektronik Series 700 prone to missing authentication for traffic capture function
    cvelistv5