CVE-2023-29411

9.8CRITICAL

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior

Опубликовано: 4/18/2023Обновлено: 11/21/2024
Посмотреть на NVDПосмотреть на MITRE

Описание

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface.

ИИ-АнализНа базе ИИ

Затронутые продукты

schneider-electricapc_easy_ups_online_monitoring_software
microsoftwindows_10
-
microsoftwindows_11
-
microsoftwindows_server_2016
-
microsoftwindows_server_2019
-
microsoftwindows_server_2022
-
schneider-electriceasy_ups_online_monitoring_software
microsoftwindows_10
-
microsoftwindows_11
-
microsoftwindows_server_2016
-
microsoftwindows_server_2019
-
microsoftwindows_server_2022
-

Ссылки