Known vulnerabilities in APC Easy UPS Online 2.5-GA-01-22320

Vendor: Schneider Electric
Software: APC Easy UPS Online
Version: 2.5-GA-01-22320
Software CPE: cpe:2.3:a:schneider_electric:apc_easy_ups_online:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting APC Easy UPS Online version 2.5-GA-01-22320 APC Easy UPS Online 2.5-GA-01-22320 is affected by 3 vulnerabilities: 2 high, 1 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75150 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-29412		 CWE-78 High
No
No
 2.6-GA 17.04.2023 SB2023041704
#VU75149 - Missing Authentication for Critical Function
CVE-2023-29411		 CWE-306 High
No
No
 2.6-GA 17.04.2023 SB2023041704
#VU75148 - Missing Authentication for Critical Function
CVE-2023-29413		 CWE-306 Medium
No
No
 2.6-GA 17.04.2023 SB2023041704