Summary
Schneider Electric is aware of a vulnerability in its Easy UPS Online Monitoring Software, known
as Easy UPS Online Monitoring Software, and Schneider Electric UPS Online Monitoring
Software known as Schneider SP Series UPS Online Monitoring Software in China.
The Easy UPS Online Monitoring Software is used to configure and manage Easy UPS
products.
Failure to apply the remediations provided below may risk elevation of privileges which could
result in arbitrary file deletion with system privileges.
Vulnerabilities 1
-
Medium 5.3
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul…
Revision history
-
#1.0.0
Original Release
References
-
Easy UPS Online Monitoring Software - SEVD-2023-346-03 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-346-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-346-03.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/