Skip to content
Sign in
7.5 High

CVE-2023-29413 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when…

Description

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthenticated user on the Schneider UPS Monitor service.

Affected products and versions

Product Affected versions Fixed in
APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) 2.5 2.5-GA-01-22320 → latest No fix stated
Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) 2.5 2.5-GS-01-22320 → latest No fix stated

Other CVEs of APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)

The 3 CVEs of APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) →
CVE-2023-29412 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability… 9.8 Critical CVE-2023-29411 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to… 9.8 Critical
Track this CVE