Schneider Electric PowerChute Serial Shutdown

CVEs (1)

Remediations

• Version 1.3 of PowerChute Serial Shutdown includes a fix for this vulnerability and is available for download here: https://www.apc.com/us/en/product-range/137943580-powerchute-serialshutdown/#software-and-firmware
• If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Do not enable remote access to PCSS Web UI. In the Windows Firewall incoming requests on TCP port 6547 (used by PCSS) are not allowed by default. • Harden the PowerChute Serial Shutdown Agent firewall rule by listing remote computers and/or users for which you want to allow/block remote connections on TCP port 6547. • Specific instructions for these mitigations can be found in the Security Handbook.

Affected Vendors

Affected Products (2)

Affected Sectors

Critical Manufacturing