← Database

CVE-2022-42971

CRITICAL CVSS: 9.8 Published: 2023-02-01 Modified: 2026-06-17

Description

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious JSP file. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)

Affected Platforms

Microsoft Windows Server 2016Schneider-Electric Easy Ups Online Monitoring SoftwareMicrosoft Windows 7Microsoft Windows Server 2019Schneider-Electric Apc Easy Ups Online Monitoring SoftwareMicrosoft Windows Server 2022Microsoft Windows 11Microsoft Windows 10

Weakness Type

CWE-434, CWE-434

References