CVE-2022-22805: Schneider Electric Scl Series 1029 Ups Firmware

Critical severity, CVSS 9.8. EPSS: 11.9% chance of exploitation in the next 30 days.

A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause remote code execution when an improperly handled TLS packet is reassembled. Affected Product: SmartConnect Family: SMT Series (SMT Series ID=1015: UPS 04.5 and prior), SMC Series (SMC Series ID=1018: UPS 04.2 and prior), SMTL Series (SMTL Series ID=1026: UPS 02.9 and prior), SCL Series (SCL Series ID=1029: UPS 02.5 and prior / SCL Series ID=1030: UPS 02.5 and prior / SCL Series ID=1036: UPS 02.5 and prior / SCL Series ID=1037: UPS 03.1 and prior), SMX Series (SMX Series ID=1031: UPS 03.1 and prior)

Affected products

• Schneider Electric Scl Series 1029 Ups Firmware: up to and including 02.5
• Schneider Electric Scl Series 1030 Ups Firmware: up to and including 02.5
• Schneider Electric Scl Series 1036 Ups Firmware: up to and including 02.5
• Schneider Electric Scl Series 1037 Ups Firmware: up to and including 03.1
• Schneider Electric Smc Series 1018 Ups Firmware: up to and including 04.2
• Schneider Electric Smt Series 1015 Ups Firmware: up to and including 04.5
• Schneider Electric Smtl Series 1026 Ups Firmware: up to and including 02.9
• Schneider Electric Smx Series 1031 Ups Firmware: up to and including 03.1

Published 2022-03-09. Last modified 2026-06-17.