PT-2023-2418 · Schneider+1 · Schneider Ups Monitor Service+1
CVE-2023-29413
·
Publicado
2023-04-14
·
Atualizado
2023-04-28
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Schneider UPS Monitor service (affected versions not specified)
APC Easy UPS Online Monitoring Software (affected versions not specified)
Description
A Missing Authentication for Critical Function issue exists, which could cause Denial-of-Service when accessed by an unauthenticated user. This could allow a remote attacker to cause a denial of service.
Recommendations
For the Schneider UPS Monitor service, consider implementing proper authentication mechanisms for critical functions to prevent unauthorized access.
For the APC Easy UPS Online Monitoring Software, restrict access to critical functions until proper authentication is implemented.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Missing Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apc Easy Ups Online Monitoring
Schneider Ups Monitor Service