Schneider Electric PowerChute Serial Shutdown

Schneider Electric PowerChute Serial Shutdown versions 1.4 and earlier contain multiple vulnerabilities that could allow attackers to overwrite critical files, inject malicious data, gain unauthorized access, or trigger denial-of-service conditions. These vulnerabilities are being addressed with version 1.5, which is available for Windows and Linux. Affected products include Schneider Electric PowerChute Serial Shutdown, running on SuSE, Red Hat, and Microsoft platforms. The vulnerabilities are related to improper file path restrictions and excessive authentication attempts, and are actively being mitigated by Schneider Electric.