Incorrect Default Permissions in Schneider Electric Software
CVE-2025-11567

7.3HIGH

What is CVE-2025-11567?

A vulnerability characterized by incorrect default permissions has been identified in Schneider Electric software. This flaw arises from inadequate security measures applied to the target installation folder, potentially allowing unauthorized users to gain elevated system access. Ensuring proper permissions is crucial to prevent exploitation and maintain the integrity of system operations.

Affected Version(s)

PowerChute Serial Shutdown Versions v1.3 and prior

References

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-11567 : Incorrect Default Permissions in Schneider Electric Software