Skip to main content

Multiple Vulnerabilities in APC Easy UPS Online Monitoring Software

APC Easy UPS Online Monitoring Software, produced by Schneider Electric, is affected by two Critical severity vulnerabilities and one High severity vulnerability

Threat ID:
CC-4309
Threat Severity:
Medium
Published:
25 April 2023 3:34 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

APC Easy UPS Online Monitoring Software, produced by Schneider Electric, is affected by two Critical severity vulnerabilities and one High severity vulnerability

Affected platforms

The following platforms are known to be affected:

Versions: V2.5-GA-01-22320 and prior

APC Easy UPS Online Monitoring Software

Threat details

Introduction

Schneider Electric has released a security notification regarding three vulnerabilities affecting APC Easy UPS Online Monitoring Software. Two of the vulnerabilities are classified as Critical and could allow remote code execution by an unauthenticated attacker. The third vulnerability is classified as High severity and could result in a denial-of-service condition, if exploited by an unauthenticated attacker.

Remediation advice

Affected organisations are encouraged to review Schnieder Electric's security notification and apply the relevant updates.

Last edited: 25 April 2023 3:34 pm