Schneider Electric EcoStruxure Panel Server Initialization of a Resource with an Insecure Default (CVE-2026-6866)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505938);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/05");

  script_cve_id("CVE-2026-6866");

  script_name(english:"Schneider Electric EcoStruxure Panel Server Initialization of a Resource with an Insecure Default (CVE-2026-6866)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"CWE-1188 Initialization of a Resource with an Insecure Default
vulnerability exists that could cause unauthorized disclosure of
sensitive information when credentials revert to initial settings in
rare circumstances, enabling unauthorized authentication using known
credentials.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-132-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-132-04.pdf
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?4e060ecb");
  script_set_attribute(attribute:"see_also", value:"https://www.cisa.gov/news-events/ics-advisories/icsa-26-160-03");
  script_set_attribute(attribute:"solution", value:
"The following text was originally created by the Cybersecurity and Infrastructure Security Agency (CISA). The original
can be found at CISA.gov.");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-6866");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(1188);

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/05/12");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/05/12");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/04");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:schneider-electric:ecostruxure_panel_server_pas400_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:schneider-electric:ecostruxure_panel_server_pas600_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:schneider-electric:ecostruxure_panel_server_pas600v2_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:schneider-electric:ecostruxure_panel_server_pas800_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:schneider-electric:ecostruxure_panel_server_pas800v2_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Schneider");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Schneider');

var asset = tenable_ot::assets::get(vendor:'Schneider');

var vuln_cpes = {
    "cpe:/o:schneider-electric:ecostruxure_panel_server_pas400_firmware" :
        {"versionEndExcluding" : "002.006.000", "family" : "PanelServers"},
    "cpe:/o:schneider-electric:ecostruxure_panel_server_pas600_firmware" :
        {"versionEndExcluding" : "002.006.000", "family" : "PanelServers"},
    "cpe:/o:schneider-electric:ecostruxure_panel_server_pas600v2_firmware" :
        {"versionEndExcluding" : "002.006.000", "family" : "PanelServers"},
    "cpe:/o:schneider-electric:ecostruxure_panel_server_pas800_firmware" :
        {"versionEndExcluding" : "002.006.000", "family" : "PanelServers"},
    "cpe:/o:schneider-electric:ecostruxure_panel_server_pas800v2_firmware" :
        {"versionEndExcluding" : "002.006.000", "family" : "PanelServers"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);