Schneider Electric’s EcoStruxure IT Flaw: Hackers Can Turn Your Data Center into a Comedy of Errors!
Schneider Electric EcoStruxure IT Data Center Expert is facing a security hiccup of epic proportions. A vulnerability allows anyone to impersonate a NetBotz camera and execute remote code. The fix? Upgrade to version 9.0 and avoid the drama of unauthorized access. Because who knew a data center could be this camera-shy?
Hot Take:
**_Looks like Schneider Electric’s EcoStruxure IT Data Center Expert has a new talent: it’s become an uninvited party host for remote code execution! Someone should tell it that the ‘open-door policy’ is not meant to be taken literally._**
Key Points:
– Schneider Electric’s EcoStruxure IT Data Center Expert is vulnerable to unauthenticated remote code execution.
– The vulnerability involves a path traversal and an OS command injection.
– Attackers can exploit these vulnerabilities to gain root access without authentication.
– The issue affects versions 8.3 and prior, with a fix available in version 9.0.
– The vulnerability was discovered by Jaggar Henry and Jim Becher of KoreLogic.