Schneider Electric PowerChute Serial Shutdown < 1.4.0 Multiple Vulnerabilities

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(276813);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/04/30");

  script_cve_id("CVE-2025-11565", "CVE-2025-11566", "CVE-2025-11567");
  script_xref(name:"IAVA", value:"2025-A-0856-S");

  script_name(english:"Schneider Electric PowerChute Serial Shutdown < 1.4.0 Multiple Vulnerabilities");

  script_set_attribute(attribute:"synopsis", value:
"Schneider Electric PowerChute Serial Shutdown installed on the remote host is affected by multiple vulnerabilities.");
  script_set_attribute(attribute:"description", value:
"The version of Schneider Electric PowerChute Serial Shutdown installed on the remote host is prior to 1.4.0. It is, therefore,
affected by a elevation of privilege vulnerability. Improper access control in Azure Monitor Agent allows an authorized
attacker to elevate privileges locally.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  # https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-315-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-315-01.pdf
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?81eb98c8");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Schneider Electric PowerChute Serial Shutdown version 1.4.0 or later.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-11567");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/11/12");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/11/24");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/11/25");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"x-cpe:/a:schneider-electric:powerchute_serial_shutdown");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("schneider_electric_powerchute_serial_shutdown.nbin", "schneider_electric_powerchute_serial_shutdown_nix_installed.nbin");
  script_require_keys("installed_sw/Schneider Electric PowerChute Serial Shutdown");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'Schneider Electric PowerChute Serial Shutdown', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {'fixed_version': '1.4.0'}
      ]
    }
  ]
};

var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING);
vdf::handle_check_and_report_errors(vdf_result:result);