CVEvulnerability

CVE-2023-29411

9.8 CRITICAL Published 2023-04-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-04-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-306

Description

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface.

Affected configurations

• schneider-electric apc easy ups online monitoring software (<= 2.5-ga-01-22320) • schneider-electric easy ups online monitoring software (<= 2.5-gs-01-22320)

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References