Missing Authentication in APC Easy UPS Online Monitoring Software by Schneider Electric

CVE-2022-42970

What is CVE-2022-42970?

The Easy UPS Online Monitoring Software by Schneider Electric exhibits a significant security vulnerability due to a lack of required authentication for critical functions. This flaw can potentially allow unauthorized users to access sensitive features or consume substantial system resources, posing a risk to system integrity and reliability. Users of affected versions are encouraged to update their software to mitigate potential security risks.

References