9.8
CVSSv3

CVE-2022-22805

Published: 09/03/2022 Updated: 12/05/2022
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause remote code execution when an improperly handled TLS packet is reassembled. Affected Product: SmartConnect Family: SMT Series (SMT Series ID=1015: UPS 04.5 and prior), SMC Series (SMC Series ID=1018: UPS 04.2 and prior), SMTL Series (SMTL Series ID=1026: UPS 02.9 and prior), SCL Series (SCL Series ID=1029: UPS 02.5 and prior / SCL Series ID=1030: UPS 02.5 and prior / SCL Series ID=1036: UPS 02.5 and prior / SCL Series ID=1037: UPS 03.1 and prior), SMX Series (SMX Series ID=1031: UPS 03.1 and prior)

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

schneider-electric smt_series_1015_ups_firmware

schneider-electric smc_series_1018_ups_firmware

schneider-electric smtl_series_1026_ups_firmware

schneider-electric scl_series_1029_ups_firmware

schneider-electric scl_series_1030_ups_firmware

schneider-electric scl_series_1036_ups_firmware

schneider-electric scl_series_1037_ups_firmware

schneider-electric smx_series_1031_ups_firmware

Recent Articles

Millions of APC Smart-UPS devices vulnerable to TLStorm
The Register • Laura Dobberstein • 01 Jan 1970

Get our weekly newsletter Critical zero-day vulns spotted in popular Schneider kit

If you're managing a smart model from ubiquitous uninterrupted power supply (UPS) device brand APC, you need to apply updates now – a set of three critical zero-day vulnerabilities are making Smart-UPS devices a possible entry point for network infiltration. The vulnerabilities, dubbed "TLStorm" were found in Schneider Electric's APC Smart-UPS products by security firm Armis, which made the info public on Tuesday. The name stems from the Transport Layer Security (TLS) implementation where two ...