Yüksek CVSS 7.5
CVE-2026-6866: Ecostruxure Panel Server Pas400 Firmware: güvenlik açığı
Açıklama (NVD)
CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials.
Özet bilgiler
- Ürün
- Schneider-electric Ecostruxure Panel Server Pas400 Firmware
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS v4.0
- 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS
- %0,29 (yüzdelik 22)
- CWE
- CWE-1188
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| schneider-electric-ecostruxure-panel-server-pas400-firmware | — | — | 002.006.000 |
| schneider-electric-ecostruxure-panel-server-pas600-firmware | — | — | 002.006.000 |
| schneider-electric-ecostruxure-panel-server-pas600v2-firmware | — | — | 002.006.000 |
| schneider-electric-ecostruxure-panel-server-pas800-firmware | — | — | 002.006.000 |
| schneider-electric-ecostruxure-panel-server-pas800v2-firmware | — | — | 002.006.000 |