high7.5
CVE-2023-29413
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthenticated user on the…
Impact
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthenticated user on the Schneider UPS Monitor service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Apc Easy Ups Online Monitoring Software | through 2.5-ga-01-22320 |
| Schneider-Electric | Easy Ups Online Monitoring Software | through 2.5-gs-01-22320 |
Weakness classification
References
- NVD record
- CVE.org record
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf