Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-29411
HistoryApr 18, 2023 - 9:15 p.m.

CVE-2023-29411

2023-04-1821:15:09
CWE-306
[email protected]
web.nvd.nist.gov
cve-2023-29411
missing authentication
critical function
administrative credentials
remote code execution

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.9%

JSON

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow
changes to administrative credentials, leading to potential remote code execution without
requiring prior authentication on the Java RMI interface.

Affected configurations

NVD
Node
schneider-electricapc_easy_ups_online_monitoring_softwareRange≤2.5-ga-01-22320
AND
microsoftwindows_10Match-
OR
microsoftwindows_11Match--
OR
microsoftwindows_server_2016Match-
OR
microsoftwindows_server_2019Match-
OR
microsoftwindows_server_2022Match-
Node
schneider-electriceasy_ups_online_monitoring_softwareRange≤2.5-gs-01-22320
AND
microsoftwindows_10Match-
OR
microsoftwindows_11Match--
OR
microsoftwindows_server_2016Match-
OR
microsoftwindows_server_2019Match-
OR
microsoftwindows_server_2022Match-

Related

cve 1
cnvd 1
prion 1
cvelist 1
zdi 1
malwarebytes 1
ics 1
cve
cve
CVE-2023-29411
2023-04-18 21:15:09
cnvd
cnvd
Schneider Electric Easy UPS Online Monitoring Software Access Control Error Vulnerability
2023-04-21 00:00:00
prion
prion
Authentication flaw
2023-04-18 21:15:00
cvelist
cvelist
CVE-2023-29411
2023-04-18 20:49:34
zdi
zdi
Schneider Electric APC Easy UPS Online updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability
2023-04-14 00:00:00
malwarebytes
malwarebytes
APC warns about critical vulnerabilities in online UPS monitoring software
2023-04-26 03:00:00
ics
ics
Schneider Electric APC Easy UPS Online Monitoring Software (Update A)
2024-06-11 12:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.9%

JSON
Related for NVD:CVE-2023-29411
cve1cnvd1prion1cvelist1zdi1malwarebytes1ics1