Description
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to a user account by performing an arbitrary number of authentication attempts when redirect handling is disabled.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | PowerChute™ Serial Shutdown | Versions 1.5 and prior | — |
Advisories 2
- ICSA-26-260-07 Schneider Electric PowerChute Serial Shutdown CISA ICS & IT advisories · Sep 17, 2026
- SEVD-2026-223-01 Improper Restriction of Excessive Authentication Attempts vulnerability on PowerChute Serial Shutdown Schneider Electric CPCERT · Aug 11, 2026