Authentication Bypass in SmartConnect Family UPS by Schneider Electric

CVE-2022-22806

What is CVE-2022-22806?

A vulnerability exists in Schneider Electric's SmartConnect Family UPS systems, characterized as an authentication bypass due to capture-replay methods. This vulnerability permits unauthorized users to establish connections by exploiting malformed requests, compromising the integrity and security of the UPS systems. Several UPS models across different series, including SMT, SMC, SMTL, SCL, and SMX, are affected, with specific version details highlighting those that may be susceptible to this exploit. Immediate remediation steps should be taken to prevent potential unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References