Schneider Elektronik Series 700 prone to missing authentication for critical reset function

Versions reported by the vendor

Affected version ranges reported by the assigning authority (CERTVDE). Independent of NVD's CPE analysis and usually ahead of it.

• Schneider Elektronik Series 700

  • 0.0.0.0 and later · up to and including 0.1.17.6affected

Other highest-scoring records for the same primary product.

• CVE-2024-35294Schneider Elektronik Series 700 prone to missing authentication for traffic capture function
  26Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

A function added for development or support ships to production without authentication. It often relies on the assumption that it is “only reachable from the internal network.”

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1// Added for the support team2app.post("/maintenance/reset", resetDevice);

1if (config.maintenanceEnabled) {2  app.post(3    "/maintenance/reset",4    requireSession, requireRole("admin"), resetDevice5  );6}

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.