Summary
Schneider Electric is aware of a vulnerability in its Accutech Manager product.
Accutech Manager is the configuration and monitoring application for Accutech Wireless sensor devices.
Failure to apply the remediations provided below may risk local privilege escalation, which could result in an attacker accessing system level functions, including potentially the command shell.
Vulnerabilities 1
-
High 7.8
A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause u…
Revision history
-
#1.0.0
Original Release
References
-
Accutech Manager - SEVD-2023-192-03 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-192-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-192-03.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/