Aller au contenu
Se connecter
9.8 Critique

CVE-2023-29412 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability…

Description

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.

Produits et versions touchés

Produit Versions touchées Corrigé en
APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) 2.5 2.5-GA-01-22320 → dernières Pas de correctif indiqué
Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) 2.5 2.5-GS-01-22320 → dernières Pas de correctif indiqué

Autres CVE de APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)

Les 3 CVE de APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) →
CVE-2023-29413 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when… 7.5 Élevée CVE-2023-29411 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to… 9.8 Critique
Suivre cette CVE