Scl Series 1036 Ups Firmware vulnerabilities

3 known vulnerabilities in Scl Series 1036 Ups Firmware from Schneider Electric. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  SmartConnect: Authentication Bypass by Capture-replay

  CVE-2022-22806Mar 9, 2022Schneider ElectricEPSS 12.5%

  A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause an unauthenticated connection to the UPS when a malformed connection is sent. Affected Product: SmartConnect Family: SMT Series (SMT Series ID=1015: UPS 04.5 and prior), S

• 9.8 Critical severity

  SmartConnect: Buffer Copy without Checking Size of Input

  CVE-2022-22805Mar 9, 2022Schneider ElectricEPSS 11.9%

  A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause remote code execution when an improperly handled TLS packet is reassembled. Affected Product: SmartConnect Family: SMT Series (SMT Series ID

• 9.1 Critical severity

  APC Smart-UPS: Insufficient Verification of Data Authenticity

  CVE-2022-0715Mar 9, 2022Schneider ElectricEPSS 5.96%

  A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a key is leaked and used to upload malicious firmware. Affected Product: APC Smart-UPS Family: SMT Series (SMT Series ID=18: