Direkt zum Inhalt
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + Hersteller

ICS-Advisories

Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.

1

Gefunden

Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 18:56.

1 Advisories gefunden

SEVD-2026-223-01

Improper Restriction of Excessive Authentication Attempts vulnerability on PowerChute Serial Shutdown

Schneider Electric — Microsoft Windows

Schneider Electric CPCERTmiddel

Veröffentlicht

11. August 2026

Letzte Aktualisierung

11. August 2026

Verknüpfte CVEs

Betroffene Sektoren

Risk Evaluation

Schneider Electric is aware of vulnerabilities in its PowerChute™ Serial Shutdown product. The PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktops, servers and workstations. Failure to apply the remediation provided below may risk improper authentication validation which could result in disruption of operations and access to system data.

Zusammenfassung der Gegenmaßnahmen

Version v1.6 of PowerChute™ Serial Shutdown includes a fix for these vulnerabilities and is available for download here: • Windows: https://www.se.com/ww/en/download/document/SPD-PCSS_WIN_EN/ Reboot needed: Upon installation, the service is automatically restarted. A customer can validate a successful install by checking the version information in the Control Panel or on the About page within PCSS after logging in. Specific instructions and hardening guidelines for these remediations can be found in the [Security Handbook](https://download.se.com/files?p_Doc_Ref=SPD_CCON-PCSSSH_EN).

Revisionshistorie (1)
  1. Erstveröffentlichung — 11. August 2026

    Original Release

Offizielle Quelle: Schneider Electric CPCERT