PT-2023-2418 · Schneider+1 · Schneider Ups Monitor Service+1

Published

2023-04-14

·

Updated

2023-04-28

·

CVE-2023-29413

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Schneider UPS Monitor service (affected versions not specified) APC Easy UPS Online Monitoring Software (affected versions not specified)
Description A Missing Authentication for Critical Function issue exists, which could cause Denial-of-Service when accessed by an unauthenticated user. This could allow a remote attacker to cause a denial of service.
Recommendations For the Schneider UPS Monitor service, consider implementing proper authentication mechanisms for critical functions to prevent unauthorized access. For the APC Easy UPS Online Monitoring Software, restrict access to critical functions until proper authentication is implemented. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2023-02203
CVE-2023-29413
ZDI-23-443

Affected Products

Apc Easy Ups Online Monitoring
Schneider Ups Monitor Service