Summary
Schneider Electric is aware of a vulnerability in its Rack Power Distribution Unit (PDU) products.
The Rack PDU products (AP7xxxx, AP8xxxx, and APDU9xxx series) are devices that provide real-time remote monitoring at the outlet level to provide:
• advanced data center energy management
• advanced load management
• on/off outlet level power cycling
• sequencing control
Failure to apply the mitigations provided below may risk a cross-site scripting attack, which could result in execution of malicious web code, or unintended device operation.
CVSS score updated to 6.5.
Vulnerabilities 1
-
High 8.0
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could allow an attacker…
Revision history
-
#1.1.0
CVSS score updated to 6.5.
-
#1.0.0
Original Release
References
-
APC by Schneider Electric Rack PDU - SEVD-2021-348-04 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-348-04_APC_Rack_PDU_NMC2_and_NMC3_Security_Notification_V1.1.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/