AE
Product
Apc Easy Ups Online Monitoring Software
by Schneider-electric · last CVE Apr 18, 2023
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 3Medium 0Low 0
Watch

Add Apc Easy Ups Online Monitoring Software to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-29412
9.8
1%
Apr 18
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating…
Affected: through 2.5-ga-01-22320
CVE-2023-29411
9.8
1%
Apr 18
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution…
Affected: through 2.5-ga-01-22320
CVE-2022-42971
9.8
1%
Feb 1
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious JSP file
Affected: before 2.5-ga-01-22320; before 2.5-ga
CVE-2022-42970
9.8
1%
Feb 1
A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires a provable user identity or consumes a…
Affected: before 2.5-ga-01-22320; before 2.5-ga
CVE-2022-42973
7.8
0%
Feb 1
A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to the database
Affected: before 2.5-ga-01-22320; before 2.5-ga
CVE-2022-42972
7.8
0%
Feb 1
A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a local attacker modifies the webroot…
Affected: before 2.5-ga-01-22320; before 2.5-ga
CVE-2023-29413
7.5
1%
Apr 18
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthenticated user on the Schneider UPS…
Affected: through 2.5-ga-01-22320
Showing 7