Vulnerabilities > CVE-2023-28003 - Insufficient Session Expiration vulnerability in Schneider-Electric Ecostruxure Power Monitoring Expert
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized access over a hijacked session in PME after the legitimate user has signed out of their account.