Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-29412

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)

Default version status: unaffected

  • V2.5-GA-01-22320 to ≤ prioraffected

Schneider Electric Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)

Default version status: unaffected

  • V2.5-GS-01-22320 to ≤ prioraffected

References