cvedb.io
CVE-2023-29412
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2023-04-18T21:15:09.457 · Last modified 2026-06-17T05:49:59.703

Summary

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.

Affected products

schneider-electric — apc_easy_ups_online_monitoring_software

Does this affect you?

Add your gear to cvedb and we'll alert you only when schneider-electric ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.