Summary
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Commission software product.
The EcoStruxure Power Commission software is an intelligent software that helps you easily set up, test, and commission the electrical products and systems in your switchboards.
Failure to apply the remediations provided below may risk unauthorized access to application and information disclosure, which could result in loss of data integrity and confidentiality.
Vulnerabilities 1
-
High 7.8
A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functio…
Revision history
-
#1.0.0
Original Release
References
-
EcoStruxure Power Commission - SEVD-2022-347-03 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-347-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-347-03_EcoStruxure_Power_Commission_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/