Do You Use a Battery Backup System at Home? Security Flaws Found in Popular Software

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has announced security vulnerabilities in Schneider Electric PowerChute Serial Shutdown software. This software helps manage battery backup systems that keep computers and equipment running during power outages. The vulnerabilities could allow attackers to overwrite important files, gain unauthorized access to accounts, cause the system to stop working, reset passwords, or access sensitive information. This affects anyone using Schneider Electric PowerChute Serial Shutdown software with their uninterruptible power supply (UPS) systems. These battery backup devices are common in home offices, especially for people who work from home and need to protect their computers from power failures.

If you have a Schneider Electric UPS device and use the PowerChute software to manage it, your system could be vulnerable. Check your computer to see if you have this software installed.

If you use PowerChute Serial Shutdown software, take these steps right away:

1. Visit the Schneider Electric website and check for software updates for your specific model.
2. Download and install any available security patches or updates immediately.
3. If you are unsure whether you have this software, check your computer's installed programs list.
4. Consider disconnecting the UPS from your network if you cannot update it immediately, though this may limit remote management features. For long term protection of home office equipment, always keep software updated. Set your programs to update automatically when possible. Register your devices with manufacturers so you receive security notifications. If you use battery backup systems for critical equipment like medical devices or home servers, check quarterly for updates. Remember that connected devices in your home can be entry points for attackers if they are not properly maintained with current security patches.