Schneider-Electric: >> Rack Power Distribution Unit With Network Management Card 3 Firmware >> 1.0.0.28 Security Vulnerabilities
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could allow an attacker to access the system with elevated privileges when a privileged account clicks on a malicious URL that compromises the security token. Affected Products: AP7xxxx and AP8xxx with NMC2 (V6.9.6 or earlier), AP7xxx and AP8xxx with NMC3 (V1.1.0.3 or earlier), and APDU9xxx with NMC3 (V1.0.0.28 or earlier)
CVSS Score
8.0
EPSS Score
0.004
Published
2022-01-28