Local Privilege Escalation in Schneider Electric's Easy UPS Online Monitoring Software

CVE-2022-42973

What is CVE-2022-42973?

A vulnerability exists in Schneider Electric's Easy UPS Online Monitoring Software, which can allow a local attacker to escalate privileges by exploiting hard-coded credentials. This weakness arises when an attacker gains access to the database, risking unauthorized actions that could affect system integrity and reliability. Users are advised to update to the latest versions to mitigate this risk.

References