CVE-2023-29413: high-severity vulnerability in Schneider Electric APC Easy UPS Online…
Published · Updated
Follow this CVE+ Monitor Schneider Electric Easy UPS Online Monitoring+ Monitor APC Easy UPS Online Monitoring
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.7%
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause
Denial-of-Service when accessed by an unauthenticated user on the Schneider UPS Monitor
service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Schneider Electric · APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)Schneider Electric · Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)Related CVEs — Schneider Electric APC Easy UPS Online…
In the same product, most dangerous first.