Description
CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized user without permission rights has physical access to the EPAS-UI computer and is able to reboot the workstation and interrupt the normal boot process.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Schneider Electric EcoStruxure Power Automation System User Interface (EPAS-UI) - Secured Versions
Default version status: unaffected
v2.1 up to and including v2.9affected