Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-29412 EUVD-2023-32981GHSA-7p8q-cvq9-54g6

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause re…

Published Apr 18, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) Product: Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) Platform: Windows Category: ICS / OT

Description

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command
Injection') vulnerability exists that could cause remote code execution when manipulating
internal methods through Java RMI interface.

Affected products

VendorProductAffectedFixed
Schneider Electric APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) V2.5-GA-01-22320 – ≤ prior —
Schneider Electric Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) V2.5-GS-01-22320 – ≤ prior —

Advisories 2

References