CVE-2022-42972: High severity apc easy ups online monitoring software vulnerability
A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a local attacker modifies the webroot directory. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-42972.
What is the severity of CVE-2022-42972?
The severity of CVE-2022-42972 is high.
Which products are affected by CVE-2022-42972?
APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022) is affected by CVE-2022-42972.
What is the CWE ID for CVE-2022-42972?
The CWE ID for CVE-2022-42972 is CWE-732.
How can the vulnerability CVE-2022-42972 be exploited?
CVE-2022-42972 can be exploited by a local attacker modifying the webroot directory to cause local privilege escalation.