A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause user privilege escalation if a local user sends specific string input to a local function call.

A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause user privilege escalation if a local user sends specific string input to a local function call.

Schneider Electric is aware of ​a vulnerability​ in its ​Accutech Manager​ product. Accutech Manager is the configuration and monitoring application for Accutech Wireless sensor devices. Failure to apply the remediations provided below may risk local ​privilege escalation​, which could result in an attacker accessing system level functions, including potentially the command shell.