Skip to content
Sign in
9.8 Critical

CVE-2023-29411 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to…

Description

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface.

Affected products and versions

Product Affected versions Fixed in
APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) 2.5 2.5-GA-01-22320 → latest No fix stated
Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) 2.5 2.5-GS-01-22320 → latest No fix stated

Other CVEs of APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)

The 3 CVEs of APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) →
CVE-2023-29413 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when… 7.5 High CVE-2023-29412 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability… 9.8 Critical
Track this CVE