CVE-2023-29413

Description

References

• download.schneider-electric.com/files · Mitigation

More vulnerabilities in apc easy ups online monitoring software

• CVE-2023-29412CRITICAL 9.8CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause rem…
• CVE-2023-29411CRITICAL 9.8 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leadin…
• CVE-2022-42973HIGH 7.8A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to th…
• CVE-2022-42972HIGH 7.8A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a loc…
• CVE-2022-42971CRITICAL 9.8A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker upl…