Description
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exist in AccuSine PCS+ / PFV+ (Versions prior to V1.6.7) and AccuSine PCSn (Versions prior to V2.2.4) that could allow an authenticated attacker to access the device via FTP protocol.
Related CPE's
References
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-05
PatchVendor Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
7.2 · High
Information
Source identifier
Vulnerability status
Modified
Published
2021-09-02T15:15:08.393Z
4 years agoLast modified
2024-11-21T04:50:40.907Z
1 year ago