Known vulnerabilities in Smart-UPS SRT 5000

Known vulnerabilities in Smart-UPS SRT 5000

Vendor: Schneider Electric

Software: Smart-UPS SRT 5000

Software CPE: cpe:2.3:h:schneider_electric:smart-ups_srt_5000:*:*:*:*:*:*:*:*

Website: https://www.schneider-electric.com/ww/en/

Total vulnerabilities: 11

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU58510 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	CWE-79	Low	No	No	-	03.12.2021	SB2021120323
#VU58509 - Improper Authentication	CWE-287	Medium	No	No	-	03.12.2021	SB2021120323
#VU58508 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	CWE-79	Low	No	No	-	03.12.2021	SB2021120323
#VU58283 - Improper Access Control	CWE-284	Medium	No	No	-	22.11.2021	SB2021111908
#VU58282 - Cross-Site Request Forgery (CSRF)	CWE-352	Low	No	No	-	22.11.2021	SB2021111908
#VU58281 - Permissions, Privileges, and Access Controls	CWE-264	Medium	No	No	-	22.11.2021	SB2021111908
#VU58280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-22813	CWE-79	Low	No	No	-	22.11.2021	SB2021111908
#VU58279 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-22812	CWE-79	Low	No	No	-	22.11.2021	SB2021111908
#VU58278 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-22811	CWE-79	Low	No	No	-	22.11.2021	SB2021111908
#VU58256 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-22815	CWE-79	Low	No	No	-	19.11.2021	SB2021111908
#VU5810 - Memory corruption CVE-2017-2991	CWE-119	High	No	No	-	14.02.2017	SB2017021401 SB2017022101 SB2017022002 and 5 more