CVE-2022-42970
Description
A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)
How to fix
- schneider-electric easy_ups_online_monitoring_software2.5-gs-01-22320, 2.5-gs or later
- schneider-electric apc_easy_ups_online_monitoring_software2.5-ga-01-22320, 2.5-ga or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric easy_ups_online_monitoring_software | v < 2.5-gs-01-22320, v < 2.5-gs | 2.5-gs-01-22320, 2.5-gs |
| schneider-electric apc_easy_ups_online_monitoring_software | v < 2.5-ga-01-22320, v < 2.5-ga | 2.5-ga-01-22320, 2.5-ga |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.