CVE-2023-29411: critical vulnerability in Schneider Electric APC Easy UPS Online…
Published · Updated
Follow this CVE+ Monitor Schneider Electric Easy UPS Online Monitoring+ Monitor APC Easy UPS Online Monitoring
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 1.3%
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow
changes to administrative credentials, leading to potential remote code execution without
requiring prior authentication on the Java RMI interface.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Schneider Electric · APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)Schneider Electric · Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)Related CVEs — Schneider Electric APC Easy UPS Online…
In the same product, most dangerous first.