VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Dec 14, 2023· Updated Jun 17, 2026

CVE-2023-6407

CVE-2023-6407

Description

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file deletion upon service restart when accessed by a local and low-privileged attacker.

Affected products

2
  • Schneider Electric/Easy Ups Online Monitoring Softwarecpe-rescue2 versions
    2.6-GA-01-23116 and prior (Windows 10, 11, Windows Server 2016, 2019, 2022)+ 1 more
    • (no CPE)range: 2.6-GA-01-23116 and prior (Windows 10, 11, Windows Server 2016, 2019, 2022)
    • cpe:2.3:a:schneider-electric:easy_ups_online_monitoring_software:*:*:*:*:*:*:*:*range: <2.6-ga-01-23248

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.