PT-2023-2418 · Schneider+1 · Schneider Ups Monitor Service+1

CVE-2023-29413

·

Publicado

2023-04-14

·

Atualizado

2023-04-28

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Schneider UPS Monitor service (affected versions not specified) APC Easy UPS Online Monitoring Software (affected versions not specified)
Description A Missing Authentication for Critical Function issue exists, which could cause Denial-of-Service when accessed by an unauthenticated user. This could allow a remote attacker to cause a denial of service.
Recommendations For the Schneider UPS Monitor service, consider implementing proper authentication mechanisms for critical functions to prevent unauthorized access. For the APC Easy UPS Online Monitoring Software, restrict access to critical functions until proper authentication is implemented. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-02203
CVE-2023-29413
ZDI-23-443

Produtos afetados

Apc Easy Ups Online Monitoring
Schneider Ups Monitor Service