CVE-2000-1242

CVE-2000-1242 concerns the HTTP service in APC PowerChute that uses a default username and password, enabling remote attackers to gain system access. The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE List) with consistent description. The exact affected scope (software vers...

CVE-2020-7526

CVE-2020-7526 affects PowerChute Business Edition (v9.0.x and earlier). Improper input validation could allow remote code execution when a script is executed during a shutdown event. NVD/Red Hat/Nessus entries corroborate the vulnerability in PowerChute before version 9.1; exploitation is describ...

CVE-2011-4263

CVE-2011-4263 affects Schneider Electric APC PowerChute Business Edition prior to 8.5, with a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Multiple sources (NVD, JVN, Red Hat, OpenVAS entries) corroborat...

CVE-2002-1924

CVE-2002-1924 affects PowerChute Plus 5.0.2. The installation creates a directory named “Pwrchute” that is shared and world-writable, allowing remote attackers to modify or create files within that directory. Root cause: insecure directory permissions at install. Impact: potential unauthorized mo...

CVE-2004-2046

CVE-2004-2046 affects APC PowerChute Business Edition 6.0–7.0.1. The vulnerability is described as allowing remote denial of service via unknown attack vectors. The NVD entry provides a CVSS v2 base score of 5.0 (medium) with a network attack vector, low attack complexity, no authentication requi...