PowerChute™ Serial Shutdown vulnerabilities

2 known vulnerabilities in PowerChute™ Serial Shutdown from Schneider Electric. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  PowerChute™ Serial Shutdown: Incorrect Default Permissions

  CVE-2025-11567Nov 12, 2025Schneider Electric

  CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target installation folder is not properly secured.

• 7.3 High severity

  PowerChute™ Serial Shutdown: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-11565Nov 12, 2025Schneider Electric

  CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause elevated system access when a Web Admin user on the local network tampers with the POST /REST/UpdateJRE request payload.