Skip to content
OpenAdvisories
Critical SEVD-2023-101-04 3 CVEs

Easy UPS Online Monitoring Software

Published Apr 11, 2023 · Updated Jun 11, 2024 · Revision 4

Vendor: Apc Vendor: Microsoft Vendor: Schneider Electric Product: Easy UPS Online Monitoring Software Product: Easy UPS Online Monitoring Software Product: Windows Product: Windows Server

Summary

Schneider Electric is aware of multiple vulnerabilities in its Easy UPS Online Monitoring Software, known as APC Easy UPS Online Monitoring Software, and Schneider Electric UPS Online Monitoring Software known as Schneider SP Series UPS Online Monitoring Software in China.

The Easy UPS Online Monitoring Software is used to configure and manage Easy UPS products.

Failure to apply the remediations provided below may risk remote code execution, escalation of privileges, or authentication bypass, which could result in execution of malicious web code or loss of device functionality.

June 2024 Update: Vulnerability description for CVE-2023-29412 has been updated. CWE-78 is correct, but the initial description didn’t match with this CWE ID. Remediation instructions were updated to clarify support status.

Vulnerabilities 3

Revision history

  1. #4.0.0

    Vulnerability description for CVE-2023-29412 has been updated. CWE-78 is correct, but the initial description didn't match with this CWE ID.Remediation instructions were updated to clarify support status.

  2. #3.0.0

    A remediation is available that now includes all supported Windows versions.

  3. #2.0.0

    The document has been updated to reflect the APC Easy UPS Online Monitoring Software and Schneider Electric Easy UPS Online Monitoring Software remediation is for Windows 10 only. A mitigation for APC Easy UPS Online Monitoring Software and Schneider Electric Easy UPS Online Monitoring Software for Windows 10, 11 Windows Server 2016, 2019, and 2022 has been added.

  4. #1.0.0

    Original Release

References