CVE-2023-29411 (published 2023-04-18T20:49:34.059Z)

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow
changes to administrative credentials, leading to potential remote code execution without
requiring prior authentication on the Java RMI interface. 




Affected products: Vendor: Schneider Electric
Product: APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)
Versions: V2.5-GA-01-22320