CVE-2024-35293

An unauthenticated remote attacker may use a missing authentication for critical function vulnerability to reboot or erase the affected devices resulting in data loss and/or a DoS.

Score

CVSS 3.1 9.1 Critical

Status

Deferred - info@cert.vde.com

Published

2024-10-02

Last modified

2024-10-02

Weaknesses

CWE-306

Affected products

• Series 700 (Schneider Elektronik)

References

• https://www.schneider-elektronik.de/wp-content/uploads/2024/07/SAR-202405-1.pdf