NetSight
IP …
critical9.8

CVE-2023-29411

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remot…

Impact

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface.

Affected products

VendorProductAffected versions
Schneider-ElectricApc Easy Ups Online Monitoring Software
through 2.5-ga-01-22320
Schneider-ElectricEasy Ups Online Monitoring Software
through 2.5-gs-01-22320

Weakness classification

CWE-306

References