CVE-2022-0715 Auth bypass in APC Smart-UPS
Attackers can upload malicious firmware to APC Smart-UPS devices by exploiting improper authentication when a key is leaked, leading to arbitrary behavior changes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-0715?
CVE-2022-0715 is a high-severity authentication bypass vulnerability in Schneider Electric APC Smart-UPS, published on 9 Mar 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a key is leaked and used to upload malicious firmware. Affected Product: APC Smart-UPS Family: SMT Series (SMT Series ID=18: UPS 09.8 and prior / SMT Series ID=1040: UPS 01.2 and prior / SMT Series ID=1031: UPS 03.1 and prior), SMC Series (SMC Series ID=1005: UPS 14.1 and prior / SMC Series ID=1007: UPS 11.0 and prior / SMC Series ID=1041: UPS 01.1 and prior), SCL Series (SCL Series ID=1030: UPS 02.5 and prior / SCL Series ID=1036: UPS 02.5 and prior), SMX Series (SMX Series ID=20: UPS 10.2 and prior / SMX Series ID=23: UPS 07.0 and prior), SRT Series (SRT Series ID=1010/1019/1025: UPS 08.3 and prior / SRT Series ID=1024: UPS 01.0 and prior / SRT Series ID=1020: UPS 10.4 and prior / SRT Series ID=1021: UPS 12.2 and prior / SRT Series ID=1001/1013: UPS 05.1 and prior / SRT Series ID=1002/1014: UPSa05.2 and prior), APC SmartConnect Family: SMT Series (SMT Series ID=1015: UPS 04.5 and prior), SMC Series (SMC Series ID=1018: UPS 04.2 and prior), SMTL Series (SMTL Series ID=1026: UPS 02.9 and prior), SCL Series (SCL Series ID=1029: UPS 02.5 and prior / SCL Series ID=1030: UPS 02.5 and prior / SCL Series ID=1036: UPS 02.5 and prior / SCL Series ID=1037: UPS 03.1 and prior), SMX Series (SMX Series ID=1031: UPS 03.1 and prior)
Which versions are affected by CVE-2022-0715?
It affects 33 products.
Products include Schneider-Electric Scl Series 1029 Ups Firmware, Schneider-Electric Scl Series 1030 Ups Firmware, Schneider-Electric Scl Series 1036 Ups Firmware, Schneider-Electric Scl Series 1037 Ups Firmware, Schneider-Electric Smc Series 1005 Ups Firmware, Schneider-Electric Smc Series 1007 Ups Firmware and 27 more.
How do I fix CVE-2022-0715?
No fix has been published for CVE-2022-0715 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-0715 being exploited?
There is no known exploitation of CVE-2022-0715 in the wild and no public exploit code.
Other vulnerabilities in Schneider Electric APC Smart-UPS
Sources
Also known as GHSA-fxwp-hqgp-45qg.