CVE-2023-29412 — Schneider Electric / APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)

Description (CNA)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)	affected V2.5-GA-01-22320 through prior
Schneider Electric / Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)	affected V2.5-GS-01-22320 through prior

CWE

CWE-78

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf

ADP enrichment

CVE

No English description supplied.

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf

CISA-ADP

No English description supplied.

No references supplied.