Easy Ups Online Monitoring Software (Schneider-electric) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2023-12-14. Vendor: Schneider-electric.

CVEs of Easy Ups Online Monitoring Software

• CVE-2023-6407 - CVSS 7.1 (high), 2023-12-14: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file deletion upon…
• CVE-2023-29413 - CVSS 7.5 (high), 2023-04-18: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthenticated user on…
• CVE-2023-29412 - CVSS 9.8 (critical), 2023-04-18: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution…
• CVE-2023-29411 - CVSS 9.8 (critical), 2023-04-18: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential…
• CVE-2022-42973 - CVSS 7.8 (high), 2023-02-01: A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to the database.…
• CVE-2022-42972 - CVSS 7.8 (high), 2023-02-01: A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a local attacker…
• CVE-2022-42971 - CVSS 9.8 (critical), 2023-02-01: A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious…
• CVE-2022-42970 - CVSS 9.8 (critical), 2023-02-01: A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires a provable user…