| Package | Affected versions | Patched versions |
|---|---|---|
| ecostruxure energy expert | = 2.0 | |
| ecostruxure power monitoring expert | = 7.0= 8.0= 9.0 | |
| power manager | = 1.1= 1.2= 1.3 | |
| powerscada expert with advanced reporting and dashboards | = 8.0 | |
| powerscada operation with advanced reporting and dashboards | = 9.0 |
A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a user the ability to perform actions via the web interface at a higher privilege level.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free