Advisories · Technology

Schneider Electric APC Easy UPS Online Monitoring Software.

Every CVE that names Schneider Electric APC Easy UPS Online Monitoring Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-42973 CVE record

CVSS 7.8 High

Hard-coded credentials in Schneider Electric APC Easy UPS Online Monitoring Software and others
- Schneider Electric APC Easy UPS Online Monitoring Software
- Schneider Electric Easy UPS Online Monitoring Software
- Hard-coded credentials
Not analysed yet 1 Feb 2023
CVE-2022-42972 CVE record

CVSS 7.8 High

Incorrect permission assignment in Schneider Electric APC Easy UPS Online Monitoring Software and others
- Schneider Electric APC Easy UPS Online Monitoring Software
- Schneider Electric Easy UPS Online Monitoring Software
- Broken access control
Not analysed yet 1 Feb 2023
CVE-2022-42971 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unrestricted file upload in Schneider Electric APC Easy UPS Online Monitoring Software and others
- Schneider Electric APC Easy UPS Online Monitoring Software
- Schneider Electric Easy UPS Online Monitoring Software
- Unrestricted file upload
Not analysed yet 1 Feb 2023
CVE-2022-42970 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Schneider Electric APC Easy UPS Online Monitoring Software and others
- Schneider Electric APC Easy UPS Online Monitoring Software
- Schneider Electric Easy UPS Online Monitoring Software
- Authentication bypass
Not analysed yet 1 Feb 2023