Approved changes feed: RSS · Atom

cpe:2.3:a:schneider_electric:apc_easy_ups_online_monitoring_software_(windows_10,_11_windows_server_2016,_2019,_2022):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5)
ProductApc Easy Ups Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) (af3c3cd6-9937-5234-9853-8c95f608e537)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29413 vulnerable 2026-06-08 06:02:40.155439 Details available
HIGH (7.5)
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthenticated user on the Schneider UPS Monitor service.
Published: 2023-04-18T20:50:53.336Z
Updated: 2025-02-05T20:59:20.742Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29412 vulnerable 2026-06-08 06:02:40.154309 Details available
CRITICAL (9.8)
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.
Published: 2023-04-18T20:50:08.288Z
Updated: 2025-02-05T21:00:38.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29411 vulnerable 2026-06-08 06:02:40.148681 Details available
CRITICAL (9.8)
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface.
Published: 2023-04-18T20:49:34.059Z
Updated: 2025-02-05T21:22:08.895Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.