Description
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file deletion upon service restart when accessed by a local and low-privileged attacker.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Schneider Electric Easy UPS Online Monitoring Software
Default version status: unaffected
2.6-GA-01-23116 and prior (Windows 10, 11, Windows Server 2016, 2019, 2022)affected