112 matches found
CVE-2021-22812
A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC. Affected Products: 1-Phase Uninterruptible Power...
CVE-2021-22811
A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause script execution when the request of a privileged account accessing the vulnerable web page is intercepted. Affected Products: 1-Phase Uninterruptible Power Supply UP...
The vulnerability of the software for controlling uninterruptible power supplies (UPS) in PowerChute Business Edition arises from insufficient validation of input data. This allows a intruder to execute arbitrary code.
The vulnerability of the software for controlling uninterruptible power supplies UPS of the PowerChute Business Edition exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2020-6650
UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software attempts to see if there are updates...
The vulnerability of the embedded web-server software module of the APC MGE SNMP/Web Card Transverse 66074 power supply failure management system allows a hacker to gain full control over the device.
The vulnerability of the embedded web-server-based microprogramming software module for managing uninterruptible power supplies, the APC MGE SNMP/Web Card Transverse 66074, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass...
Schneider Electric MGE UPS and MGE STS 66074 MGE Network Management Card Transverse Improper Authorization Vulnerability
The Schneider Electric MGE UPS and MGE STS are both products of the French company Schneider Electric.The Schneider Electric MGE UPS is an uninterruptible power supply unit.The MGE STS is a static toggle switch.66074 MGE Network Management Card Transverse is one of the network management cards...
NetMan 204 Backdoor Account Vulnerability
NetMan is an integrated development of UPS for medium and large networks, providing a high level of reliability in the communication between UPS and related management systems. A backdoor account vulnerability exists in NetMan 204. An attacker can exploit this vulnerability to execute system...
Riello UPS / NetMan Detection (HTTP)
HTTP based detection of Riello NetMan network cards and the underlying uninterruptible power supply UPS device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Unbreakable Enterprise kernel security update
2.6.39-400.284.2 - Btrfs: fix truncation of compressed and inlined extents Divya Indi Orabug: 22307286 CVE-2015-8374 - Btrfs: fix file corruption and data loss after cloning inline extents Divya Indi Orabug: 22307286 CVE-2015-8374 - netfilter: xtables: make sure e-nextoffset covers remaining blob...
GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities
Exploit for hardware platform in category web applications Exploit Title: GE Industrial Solutions - UPS SNMP Adapter Command Injection and Clear-text Storage of Sensitive Information Vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: http://www.geindustrial.com/ Versions Reported: All...
HP Power Manager Detection
HP Power Manager, a web interface for managing an HP uninterruptible power supply UPS, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42800; scriptversion"1.14"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"HP Power Manag...
