Schneider Electric APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-29413 | V2.5-GA-01-22320 – prior | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthen | HIGH 7.5 | 0.7 % | ||
| CVE-2023-29412 | V2.5-GA-01-22320 – prior | CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause rem | CRITICAL 9.8 | 1.2 % | ||
| CVE-2023-29411 | V2.5-GA-01-22320 – prior | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading | CRITICAL 9.8 | 1.3 % |