CVE-2023-29412: Schneider Electric Apc Easy Ups Online Monitoring Software

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.

Affected products

• Schneider Electric Apc Easy Ups Online Monitoring Software: up to and including 2.5-ga-01-22320
• Schneider Electric Easy Ups Online Monitoring Software: up to and including 2.5-gs-01-22320

Published 2023-04-18. Last modified 2026-06-17.