CVE-2024-35294

CVSS V2 None CVSS V3 None
Description
An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials.
Overview
  • CVE ID
  • CVE-2024-35294
  • Assigner
  • CERTVDE
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-10-02T10:07:28.219Z
  • Last Modified Date
  • 2024-10-02T14:45:50.382Z
Weakness Enumerations
CWE URL
CWE-306 http://cwe.mitre.org/data/definitions/306.html
References
Reference URL Reference Tags
https://www.schneider-elektronik.de/wp-content/uploads/2024/07/SAR-202405-2.pdf vendor-advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-35294
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35294
History
Created Old Value New Value Data Type Notes
2024-10-07 00:12:43 Added to TrackCVE