CVE-2023-6407

概要

参考情報

• download.schneider-electric.com/files · Vendor Advisory

easy ups online monitoring software のその他の脆弱性

• CVE-2023-29413高 7.5 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthe…
• CVE-2023-29412緊急 9.8CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause rem…
• CVE-2023-29411緊急 9.8 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leadin…
• CVE-2022-42973高 7.8A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to th…
• CVE-2022-42972高 7.8A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a loc…