CVEvulnerability
CVE-2026-6866
8.2 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-05-12
- Last modified
- 2026-10-26
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 8.2 HIGH — CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-1188
Description
CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials.
Affected configurations
• schneider-electric ecostruxure panel server pas400 firmware (< 002.006.000)
• schneider-electric ecostruxure panel server pas600 firmware (< 002.006.000)
• schneider-electric ecostruxure panel server pas600v2 firmware (< 002.006.000)
• schneider-electric ecostruxure panel server pas800 firmware (< 002.006.000)
• schneider-electric ecostruxure panel server pas800v2 firmware (< 002.006.000)
Related
Weakness · CWE (1)
- CWE-1188 Initialization of a Resource with an Insecure Default weakness