Schneider Electric APC Easy UPS Online Monitoring Software (Update A)

🗓️ 18 Apr 2023 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 38 Views

Schneider Electric Easy UPS Online Monitoring Software vulnerabilities, missing authentication, case sensitivity, remote code execution, and denial of service risk

Reporter	Title	Published	Views	Family All 35
BDU FSTEC	The vulnerability of the APC Easy UPS Online Monitoring Software and Easy UPS Online Monitoring Software lies in the lack of authentication for a critical function, allowing attackers to execute arbitrary code.	11 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the getMacAddressByIP function in the online monitoring software APC Easy UPS Online Monitoring Software and Easy UPS Online Monitoring Software allows a intruder to execute arbitrary code.	18 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the APC Easy UPS Online Monitoring Software and Easy UPS Online Monitoring Software lies in the lack of authentication for critical functions, allowing attackers to trigger a service failure.	24 Apr 202300:00	–	bdu_fstec
Circl	CVE-2023-29411	12 Apr 202315:44	–	circl
Circl	CVE-2023-29412	19 Apr 202300:29	–	circl
Circl	CVE-2023-29413	19 Apr 202300:29	–	circl
CNNVD	Schneider Electric Easy UPS Online Monitoring Software 访问控制错误漏洞	18 Apr 202300:00	–	cnnvd
CNNVD	Schneider Electric Easy UPS Online Monitoring Software 操作系统命令注入漏洞	18 Apr 202300:00	–	cnnvd
CNNVD	Schneider Electric Easy UPS Online Monitoring Software 访问控制错误漏洞	18 Apr 202300:00	–	cnnvd
CNVD	Schneider Electric Easy UPS Online Monitoring Software Access Control Error Vulnerability	21 Apr 202300:00	–	cnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-108-02.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-108-02
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

18 Apr 2023 06:00Current

10High risk

Vulners AI Score10

CVSS 3.19.8

EPSS0.07707

SSVC