Description
A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to
maintain unauthorized access over a hijacked session in PME after the legitimate user has
signed out of their account.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EcoStruxure Power Monitoring Expert | All – ≤ PME 2022 | — |
Advisories 1
- SEVD-2023-073-01 EcoStruxure™ Power Monitoring Expert Schneider Electric CPCERT · Sep 10, 2024