Browse CVEs

HIGH 8.8 CVE-2020-7526 Improper Input Validation vulnerability exists in PowerChute Business Edition (software V9.0.x and earlier) which could cause remote code execution w… Powerchute 9.1+ Fix from $1,9502020-08-31 MEDIUM 6.8 CVE-2009-1797 Multiple cross-site request forgery (CSRF) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU … Network Management Card Mitigation only Fix from $1,6002009-12-28 HIGH 7.1 CVE-2007-6226 The American Power Conversion (APC) AP7932 0u 30amp Switched Rack Power Distribution Unit (PDU), with rpdu 3.5.5 and aos 3.5.6, allows remote attacke… Oas Mitigation only Fix from $1,9502007-12-04 MEDIUM 5.0 CVE-2005-4326 The web interface for American Power Conversion (APC) PowerChute Network Shutdown performs all communication in cleartext (base64-encoded), which all… Powerchute Network Shutdown Mitigation only Fix from $1,6002005-12-17 MEDIUM 5.0 CVE-2004-2046 Unknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote attackers to cause a denial of service via unknown attack ve… Powerchute Patch available Fix from $1,6002004-12-31 HIGH 10.0 CVE-2004-0311 American Power Conversion (APC) Web/SNMP Management SmartSlot Card 3.0 through 3.0.3 and 3.21 are shipped with a default password of TENmanUFactOryPO… Ap9606 Patch available Fix from $1,9502004-11-23 HIGH 7.2 CVE-2003-0099 Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or execute arbitrary co… Apcupsd Patch available Fix from $1,9502003-03-03 MEDIUM 5.0 CVE-2002-1924 PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attackers to mo… Powerchute Mitigation only Fix from $1,6002002-12-31 MEDIUM 5.0 CVE-2001-0564 APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of service … Ap9606 after 3.0 Fix from $1,6002001-08-22 HIGH 9.0 CVE-2000-1242 The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system acc… Powerchute Mitigation only Fix from $1,9502000-12-31