Skip to content
Sign in
9.8 Critical

CVE-2023-29412 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability…

Description

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.

Affected products and versions

Product Affected versions Fixed in
APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) 2.5 2.5-GA-01-22320 → latest No fix stated
Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) 2.5 2.5-GS-01-22320 → latest No fix stated

Other CVEs of APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)

The 3 CVEs of APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) →
CVE-2023-29413 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when… 7.5 High CVE-2023-29411 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to… 9.8 Critical
Track this CVE