CVE-2025-11565

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause elevated system access when a Web Admin user on the local network tampers with the POST /REST/UpdateJRE request payload...

CVE-2025-11565

CVE-2025-11565 affects Schneider Electric PowerChute Serial Shutdown. A path traversal (CWE-22) vulnerability could allow a Web Admin on the local network to tamper with the POST /REST/UpdateJRE payload, potentially causing elevated system access. The issue is tied to improper limitation of a pat...