9.8
Critique
CVE-2023-29411 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to…
Description
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) 2.5 | 2.5-GA-01-22320 → dernières | Pas de correctif indiqué |
| Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) 2.5 | 2.5-GS-01-22320 → dernières | Pas de correctif indiqué |