Schneider Electric EcoStruxure IT Data Center Expert Improper Privilege Management Vulnerability Allowing Privilege Escalation

A vulnerability allowing improper privilege management has been identified in Schneider Electric's EcoStruxure IT Data Center Expert, all versions through 8.3. This vulnerability could lead to privilege escalation when the server is accessed by a privileged account via a console, exploiting a setup script.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user to gain elevated rights or access within the application or system.

Remediation

Users can upgrade to version 9.0 of EcoStruxure IT Data Center Expert, which includes fixes for this vulnerability. This version is available upon request from Schneider Electric's Customer Care Center. Customers should evaluate the impact of the upgrade in a Test and Development environment or on an offline infrastructure before applying it.