VYPR

APC Smart-UPS Family

by Schneider Electric

CVEs (1)

  • CVE-2022-0715CriMar 9, 2022
    risk 0.59cvss 9.1epss 0.01

    A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a key is leaked and used to upload malicious firmware. Affected Product: APC Smart-UPS Family: SMT Series (SMT Series ID=18: UPS 09.8 and prior…