CVE-2023-29412

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cybersecurity@se.com

Published

2023-04-18

Last modified

2025-02-05

Weaknesses

CWE-78

Affected products

• Apc Easy Ups Online Monitoring Software (Schneider-electric)
• Easy Ups Online Monitoring Software (Schneider-electric)
• 11 Windows Server 2016 (Schneider Electric)
• 2019 (Schneider Electric)
• 2022 (Schneider Electric)
• Apc Easy Ups Online Monitoring Software Windows 10 (Schneider Electric)
• Schneider Electric Easy Ups Online Monitoring Software Windows 10 (Schneider Electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_…