Known vulnerabilities in APC Easy UPS Online 2.5-GA-01-22261

Vendor: Schneider Electric
Software: APC Easy UPS Online
Version: 2.5-GA-01-22261
Software CPE: cpe:2.3:a:schneider_electric:apc_easy_ups_online:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting APC Easy UPS Online version 2.5-GA-01-22261 APC Easy UPS Online 2.5-GA-01-22261 is affected by 4 vulnerabilities: 2 high, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70327 - Use of Hard-coded Credentials
CVE-2022-42973		 CWE-798 Low
No
No
 - 14.12.2022 SB2022121430
#VU70326 - Incorrect Permission Assignment for Critical Resource
CVE-2022-42972		 CWE-732 Low
No
No
 - 14.12.2022 SB2022121430
#VU70324 - Unrestricted Upload of File with Dangerous Type
CVE-2022-42971		 CWE-434 High
No
No
 - 14.12.2022 SB2022121430
#VU70323 - Missing Authentication for Critical Function
CVE-2022-42970		 CWE-306 High
No
No
 - 14.12.2022 SB2022121430