📦 Ecostruxure It Gateway

A missing authorization vulnerability (CWE-862) in Schneider Electric products allows unauthorized access when devices are network-enabled. This could enable attackers to compromise connected systems ...

This vulnerability involves hard-coded credentials in Schneider Electric software that allow local privilege escalation. Non-administrative users can exploit these credentials to gain administrative p...