CVE-2023-6407: Schneider Electric Easy Ups Online Monitoring Software

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file deletion upon service restart when accessed by a local and low-privileged attacker.

Affected products

• Schneider Electric Easy Ups Online Monitoring Software: before 2.6-ga-01-23248 (fixed in 2.6-ga-01-23248)

Published 2023-12-14. Last modified 2026-06-17.