Description
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exist in AccuSine PCS+ / PFV+ (Versions prior to V1.6.7) and AccuSine PCSn (Versions prior to V2.2.4) that could allow an authenticated attacker to access the device via FTP protocol.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | AccuSine PCS+ / PFV+ (Versions prior to V1.6.7) and AccuSine PCSn (Versions prior to V2.2.4) | AccuSine PCS+ / PFV+ (Versions prior to V1.6.7) and AccuSine PCSn (Versions prior to V2.2.4) | — |
Advisories 1
- SEVD-2021-222-05 AccuSine PCSn/PCS+/PFV+ Schneider Electric CPCERT · Aug 10, 2021