CWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the web interface when someone on the local network repeatedly requests the /accessdenied URL.

CWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the web interface when someone on the local network repeatedly requests the /accessdenied URL.

Schneider Electric is aware of a vulnerability in its PowerChute Serial Shutdown product. The PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktop, servers and workstations. Failure to apply the fix provided below may risk a Denial of Service attack, which could result in an attack that blocks access for the single user account to PCSS Web UI. The PCSS application itself is not affected and PCSS will keep protecting the server.

Schneider Electric is aware of a vulnerability in its PowerChute Serial Shutdown product. The PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktop, servers and workstations. Failure to apply the fix provided below may risk a Denial of Service attack, which could result in an attack that blocks access for the single user account to PCSS Web UI. The PCSS application itself is not affected and PCSS will keep protecting the server.