Filtered by vendor Schneider-electric Subscriptions
Filtered by product Powerchute Serial Shutdown Subscriptions

Search

Switch to Advanced Search (Beta)
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-11567 1 Schneider-electric 1 Powerchute Serial Shutdown 2025-11-14 N/A
CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target installation folder is not properly secured.
CVE-2025-11566 1 Schneider-electric 1 Powerchute Serial Shutdown 2025-11-12 N/A
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on the /REST/shutdownnow endpoint.
CVE-2025-11565 1 Schneider-electric 1 Powerchute Serial Shutdown 2025-11-12 N/A
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause elevated system access when a Web Admin user on the local network tampers with the POST /REST/UpdateJRE request payload.