Summary
Schneider Electric is aware of a vulnerability in its Acti9 PowerTag Link C product.
The Acti9 PowerTag Link C is the simplest and most efficient way to achieve a fully connected panel.
Failure to apply the remediation provided below may risk an improper access control attack, which could result in unauthorized access to other network devices.
Vulnerabilities 1
-
Medium 6.8
A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing cre…
Revision history
-
#1.0.0
Original Release
References
-
Acti9 PowerTag Link C - SEVD-2022-193-03 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-193-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-193-03_Acti9_PowerTag_Link_C_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/