This vulnerability originates from improper initialization of resources with insecure defaults. If credentials revert to initial defaults in rare circumstances, an attacker can observe and exploit known credentials to authenticate. This could expose sensitive configuration or data. Because it is a CWE‑1188, the flaw stems from a resource misconfiguration rather than code.

Schneider Electric's EcoStruxure Panel Server is the affected product. No specific version information is provided, so all firmware releases of the Panel Server should be considered potentially affected until a vendor advisory specifies otherwise.

The CVSS score of 8.2 classifies this issue as high severity. No EPSS score is available, and the vulnerability is not listed in CISA KEV, implying it is not a known exploited vulnerability yet. The attack vector is not explicitly defined in the description; based on the nature of the flaw, it is inferred that an attacker with network access to the Panel Server might exploit the default credentials if they somehow trigger the reset to factory settings.