Known vulnerabilities in APC Easy UPS Online

Vendor: Schneider Electric
Software: APC Easy UPS Online
Software CPE: cpe:2.3:a:schneider_electric:apc_easy_ups_online:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting APC Easy UPS Online APC Easy UPS Online is affected by 7 known vulnerabilities: 4 high, 1 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75150 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-29412		 CWE-78 High
No
No
 2.6-GA 17.04.2023 SB2023041704
#VU75149 - Missing Authentication for Critical Function
CVE-2023-29411		 CWE-306 High
No
No
 2.6-GA 17.04.2023 SB2023041704
#VU75148 - Missing Authentication for Critical Function
CVE-2023-29413		 CWE-306 Medium
No
No
 2.6-GA 17.04.2023 SB2023041704
#VU70327 - Use of Hard-coded Credentials
CVE-2022-42973		 CWE-798 Low
No
No
 - 14.12.2022 SB2022121430
#VU70326 - Incorrect Permission Assignment for Critical Resource
CVE-2022-42972		 CWE-732 Low
No
No
 - 14.12.2022 SB2022121430
#VU70324 - Unrestricted Upload of File with Dangerous Type
CVE-2022-42971		 CWE-434 High
No
No
 - 14.12.2022 SB2022121430
#VU70323 - Missing Authentication for Critical Function
CVE-2022-42970		 CWE-306 High
No
No
 - 14.12.2022 SB2022121430