Description

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exist in AccuSine PCS+ / PFV+ (Versions prior to V1.6.7) and AccuSine PCSn (Versions prior to V2.2.4) that could allow an authenticated attacker to access the device via FTP protocol.

Related CPE's

o

schneider-electric

accusine_pcsp_pfvp_firmware

Vulnerable

h

schneider-electric

accusine_pcs\+

-

h

schneider-electric

accusine_pfv\+

-

o

schneider-electric

accusine_pcsn_active_harmonic_filter_firmware

Vulnerable

h

schneider-electric

accusine_pcsn

-

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-01

Not Applicable

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-05

PatchVendor Advisory

Weaknesses

[email protected]

Primary
CWE-200

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.2 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-09-02T17:15:08.393

3 years ago

Last modified

2021-09-13T20:26:56.917

3 years ago