Powerchute Serial Shutdown
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider-electric:powerchute_serial_shutdown:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Powerchute Serial Shutdown (b6d06bdf-0e9f-5ec6-b0d3-55d72c41c0b0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-2405 |
vulnerable | 2026-06-08 07:55:17.006981 |
Details available
CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /helpabout requests.
Published: 2026-04-14T15:19:40.765Z
Updated: 2026-04-14T16:27:33.148Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2404 |
vulnerable | 2026-06-08 07:55:17.006510 |
Details available
CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /j_security check request payload.
Published: 2026-04-14T15:13:50.351Z
Updated: 2026-04-14T16:27:43.927Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2403 |
vulnerable | 2026-06-08 07:55:17.006209 |
Details available
CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncation impacting log integrity when a Web Admin user alters the POST /logsettings request payload.
Published: 2026-04-14T15:21:10.802Z
Updated: 2026-04-14T16:27:27.629Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2402 |
vulnerable | 2026-06-08 07:55:17.005899 |
Details available
CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on a sequence of requests to multiple endpoints.
Published: 2026-04-14T15:16:17.583Z
Updated: 2026-04-14T16:27:38.566Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2401 |
vulnerable | 2026-06-08 07:55:17.005598 |
Details available
CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when a Web Admin user executes a malicious file provided by an attacker.
Published: 2026-04-14T15:24:17.233Z
Updated: 2026-04-14T16:27:16.331Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2400 |
vulnerable | 2026-06-08 07:55:17.005165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2399 |
vulnerable | 2026-06-08 07:55:17.004561 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.