Description
A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a user the ability to perform actions via the web interface at a higher privilege level.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) | EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) | — |
Advisories 1
- SEVD-2020-287-04 EcoStruxure™ and SmartStruxure™ Power Monitoring and SCADA Software Schneider Electric CPCERT · Oct 13, 2020