NetSight
IP …
critical9.8

CVE-2023-29412

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution …

Impact

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.

Affected products

VendorProductAffected versions
Schneider-ElectricApc Easy Ups Online Monitoring Software
through 2.5-ga-01-22320
Schneider-ElectricEasy Ups Online Monitoring Software
through 2.5-gs-01-22320

Weakness classification

CWE-78

References