CVE-2023-28003

A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized access over a hijacked session in PME after the legitimate user has signed out of their account...

CVE-2023-28003

CVE-2023-28003 corresponds to a CWE-613 Insufficient Session Expiration issue in Schneider Electric EcoStruxure Power Monitoring Expert (PME). The vulnerability allows a hijacked session to persist after the legitimate user signs out, enabling unauthorized access to protected information. Connect...