apc network management card vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote malicious users to inject arbitrary web script or HTML via unsp...

Apc Network Management Card Apc Switched Rack Pdu

1 EDB exploit

Cross-site scripting (XSS) vulnerability in Forms/login1 in American Power Conversion (APC) Switched Rack PDU AP7932 B2, running rpdu 3.3.3 or 3.7.0 on AOS 3.3.4, and possibly other versions, allows remote malicious users to inject arbitrary web script or HTML via the login_usern...

Apc Ap7932 B2 Firmware 3.3.3 Apc Ap7932 B2 Firmware 3.7.0 Apc Ap7932 B2

Multiple cross-site request forgery (CSRF) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote malicious users to hijack the authentication of (1) admi...

Apc Network Management Card Apc Switched Rack Pdu

A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled.

Schneider-electric Ap9630 Firmware Schneider-electric Smart-ups Srt 5kva Firmware Schneider-electric Ap9631 Firmware Schneider-electric Ap9635 Firmware

A CWE-200: Information Exposure vulnerability exists which could cause the troubleshooting archive to be accessed. Affected Products: 1-Phase Uninterruptible Power Supply (UPS) using NMC2 including Smart-UPS, Symmetra, and Galaxy 3500 with Network Management Card 2 (NMC2): AP9630...

Schneider-electric Network Management Card 2 Firmware Schneider-electric Network Management Card 3 Firmware

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete pol...

Schneider-electric Network Management Card 2 Firmware Schneider-electric Network Management Card 3 Firmware

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause script execution when the request of a privileged account accessing the vulnerable web page is intercepted. Affected Products: 1-Phase Un...

Schneider-electric Network Management Card 2 Firmware Schneider-electric Network Management Card 3 Firmware

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC. Affected Products: 1-Ph...

Schneider-electric Network Management Card 2 Firmware Schneider-electric Network Management Card 3 Firmware

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to an edit poli...

Schneider-electric Network Management Card 2 Firmware Schneider-electric Network Management Card 3 Firmware

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists which could cause arbritrary script execution when a malicious file is read and displayed. Affected Products: 1-Phase Uninterruptible Power Supply (UPS) u...

Schneider-electric Network Management Card 2 Firmware Schneider-electric Network Management Card 3 Firmware

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook