PT-2025-46659 · Schneider Electric · Powerchute Serial Shutdown

CVE-2025-11567

·

Publicado

2025-11-11

·

Atualizado

2025-11-12

CVSS v4.0

7.3

Alta

VetorAV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions (affected versions not specified)
Description An issue exists related to incorrect default permissions that may lead to elevated system access. This occurs when the target installation folder is not adequately secured. Approximately 1000 devices worldwide are estimated to be affected. The issue allows for unauthorized system access due to improperly configured permissions.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2025-14354
CVE-2025-11567

Produtos afetados

Powerchute Serial Shutdown