Local Privilege Escalation in APC Easy UPS Online Monitoring Software by Schneider Electric

CVE-2022-42972

Summary

A vulnerability exists in Schneider Electric's Easy UPS Online Monitoring Software that allows a local attacker to perform local privilege escalation. By modifying the webroot directory, an attacker can gain elevated privileges, potentially compromising critical resources on the system. This affects several versions of the software across multiple Windows operating systems, underscoring the importance of maintaining updated software versions to mitigate such risks.

References