CVE-2024-10511: CWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the web interface when someone on the local network...
6.3
CVSS
Description
CWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the web interface
when someone on the local network repeatedly requests the /accessdenied URL.
Classification
CVE ID: CVE-2024-10511
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.3
Affected Products
Vendor: Schneider Electric
Product: PowerChute Serial Shutdown
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)