CVE:CVE-2022-42972
CNNVD:CNNVD-202302-019
Schneider Electric Easy UPS Online Monitoring Software是法国施耐德电气（Schneider Electric）公司的一款电源监控软件。
Schneider Electric Easy UPS Online Monitoring Software 存在安全漏洞，该漏洞源于存在关键资源权限分配不正确漏洞，当本地攻击者修改webroot目录时可能导致本地权限提升。
solution:Upgrade schneider-electric apc_easy_ups_online_monitoring_software to a higher version than 2.5-ga-01-22320,2.5-ga,and avoid the version (,2.5-ga-01-22320),(,2.5-ga); Upgrade schneider-electric easy_ups_online_monitoring_software to a higher version than 2.5-gs-01-22320,2.5-gs,and avoid the version (,2.5-gs-01-22320),(,2.5-gs)