Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power Commission application. Affected Products: EcoStruxure Power Commission (Versions prior to V2.25)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
授权机制不恰当
Vulnerability Title
Schneider Electric EcoStruxure Power Commission 授权问题漏洞
Vulnerability Description
Schneider Electric EcoStruxure Power Commission是法国施耐德电气（Schneider Electric）公司的一款综合性软件，可为低压配电柜的设置、测试和调试提供强大的功能。 Schneider Electric EcoStruxure Power Commission V2.25及之前版本存在授权问题漏洞，该漏洞源于存在授权不当，当攻击者获得对应用程序本地主机接口的访问权限时，可能导致对某些软件功能的未授权访问。
CVSS Information
N/A
Vulnerability Type
N/A