CVE-2024-35294 - Vulnerability Details - OpenCVE

An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00246.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2024-35266	An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.schneider-elektronik.de/wp-content/uploads/2024/07/SAR-202405-2.pdf

History

Wed, 02 Oct 2024 15:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 02 Oct 2024 10:30:00 +0000

Type	Values Removed	Values Added
Description		An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials.
Title		Schneider Elektronik Series 700 prone to missing authentication for traffic capture function
Weaknesses		CWE-306
References		https://www.schneider-elektronik.de/wp-content/uploads/2024/07/SAR-202405-2.pdf
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published: 2024-10-02T10:07:28.219Z

Updated: 2024-10-02T14:45:50.382Z

Reserved: 2024-05-15T12:37:05.393Z

Link: CVE-2024-35294

Vulnrichment

Updated: 2024-10-02T14:45:44.718Z

NVD

Status : Awaiting Analysis

Published: 2024-10-02T11:15:10.780

Modified: 2024-10-04T13:50:43.727

Link: CVE-2024-35294

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-35294", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "state": "PUBLISHED", "assignerShortName": "CERTVDE", "dateReserved": "2024-05-15T12:37:05.393Z", "datePublished": "2024-10-02T10:07:28.219Z", "dateUpdated": "2024-10-02T14:45:50.382Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Series 700", "vendor": "Schneider Elektronik", "versions": [{"lessThanOrEqual": "0.1.17.6", "status": "affected", "version": "0.0.0.0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Felix Eberstaller and David Schauer from Limes Security"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials."}], "value": "An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-306", "description": "CWE-306: Missing Authentication for Critical Function", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2024-10-02T10:07:28.219Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.schneider-elektronik.de/wp-content/uploads/2024/07/SAR-202405-2.pdf"}], "source": {"discovery": "EXTERNAL"}, "title": "Schneider Elektronik Series 700 prone to missing authentication for traffic capture function", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-02T14:45:34.798131Z", "id": "CVE-2024-35294", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-02T14:45:50.382Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-35294", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-02T14:45:34.798131Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-02T14:45:44.718Z"}}], "cna": {"title": "Schneider Elektronik Series 700 prone to missing authentication for traffic capture function", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Felix Eberstaller and David Schauer from Limes Security"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Schneider Elektronik", "product": "Series 700", "versions": [{"status": "affected", "version": "0.0.0.0", "versionType": "custom", "lessThanOrEqual": "0.1.17.6"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.schneider-elektronik.de/wp-content/uploads/2024/07/SAR-202405-2.pdf", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials.", "supportingMedia": [{"type": "text/html", "value": "An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306: Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2024-10-02T10:07:28.219Z"}}}, "cveMetadata": {"cveId": "CVE-2024-35294", "state": "PUBLISHED", "dateUpdated": "2024-10-02T14:45:50.382Z", "dateReserved": "2024-05-15T12:37:05.393Z", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "datePublished": "2024-10-02T10:07:28.219Z", "assignerShortName": "CERTVDE"}, "dataVersion": "5.1"}