CVE:CVE-2022-0715
CNNVD:CNNVD-202203-810
Schneider Electric APC Smart-UPS SMC Series等都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric APC Smart-UPS SMC Series是一款适用于单台服务器、低功耗网络和销售点 (POS) 设备的入门级 UPS。Schneider Electric APC Smart-UPS SMT Series是一款服务器、销售点、路由器、交换机、集线器和其他网络设备的线路交互式电源保护。Schneider Electric APC Smart-UPS SRT Series是一款高密度、 真正的双转换在线电源保护。
Schneider Electric 多款产品存在数据伪造问题漏洞，攻击者利用该漏洞在密钥泄露时可以随意改变UPS的行为，用于上传恶意固件。
solution:Upgrade schneider-electric smt_series_1015_ups_firmware to a higher version than 04.5,and avoid the version (,04.5]; Upgrade schneider-electric smc_series_1018_ups_firmware to a higher version than 04.2,and avoid the version (,04.2]; Upgrade schneider-electric smtl_series_1026_ups_firmware to a higher version than 02.9,and avoid the version (,02.9]; Upgrade schneider-electric scl_series_1029_ups_firmware to a higher version than 02.5,and avoid the version (,02.5]; Upgrade schneider-electric scl_series_1030_ups_firmware to a higher version than 02.5,and avoid the version (,02.5]; Upgrade schneider-electric scl_series_1036_ups_firmware to a higher version than 02.5,and avoid the version (,02.5]; Upgrade schneider-electric scl_series_1037_ups_firmware to a higher version than 03.1,and avoid the version (,03.1]; Upgrade schneider-electric smx_series_1031_ups_firmware to a higher version than 03.1,and avoid the version (,03.1]; Upgrade schneider-electric smt_series_18_ups_firmware to a higher version than 09.8,and avoid the version (,09.8]; Upgrade schneider-electric smt_series_1040_ups_firmware to a higher version than 01.2,and avoid the version (,01.2]; Upgrade schneider-electric smt_series_1031_ups_firmware to a higher version than 03.1,and avoid the version (,03.1]; Upgrade schneider-electric smc_series_1005_ups_firmware to a higher version than 14.1,and avoid the version (,14.1]; Upgrade schneider-electric smc_series_1007_ups_firmware to a higher version than 11.0,and avoid the version (,11.0]; Upgrade schneider-electric smc_series_1041_ups_firmware to a higher version than 01.1,and avoid the version (,01.1]; Upgrade schneider-electric smx_series_20_ups_firmware to a higher version than 10.2,and avoid the version (,10.2]; Upgrade schneider-electric smx_series_23_ups_firmware to a higher version than 07.0,and avoid the version (,07.0]; Upgrade schneider-electric srt_series_1010_ups_firmware to a higher version than 08.3,and avoid the version (,08.3]; Upgrade schneider-electric srt_series_1019_ups_firmware to a higher version than 08.3,and avoid the version (,08.3]; Upgrade schneider-electric srt_series_1025_ups_firmware to a higher version than 08.3,and avoid the version (,08.3]; Upgrade schneider-electric srt_series_1020_ups_firmware to a higher version than 10.4,and avoid the version (,10.4]; Upgrade schneider-electric srt_series_1021_ups_firmware to a higher version than 12.2,and avoid the version (,12.2]; Upgrade schneider-electric srt_series_1001_ups_firmware to a higher version than 05.1,and avoid the version (,05.1]; Upgrade schneider-electric srt_series_1013_ups_firmware to a higher version than 05.1,and avoid the version (,05.1]; Upgrade schneider-electric srt_series_1002_ups_firmware to a higher version than a05.2,and avoid the version (,a05.2]; Upgrade schneider-electric srt_series_1014_ups_firmware to a higher version than a05.2,and avoid the version (,a05.2]; Upgrade schneider-electric srtl1000rmxli_firmware to a higher version than 01.0,and avoid the version (,01.0]; Upgrade schneider-electric srtl1000rmxli-nc_firmware to a higher version than 01.0,and avoid the version (,01.0]; Upgrade schneider-electric srtl1500rmxli-nc_firmware to a higher version than 01.0,and avoid the version (,01.0]; Upgrade schneider-electric srtl1500rmxli_firmware to a higher version than 01.0,and avoid the version (,01.0]; Upgrade schneider-electric srtl2200rmxli_firmware to a higher version than 01.0,and avoid the version (,01.0]; Upgrade schneider-electric srtl2200rmxli-nc_firmware to a higher version than 01.0,and avoid the version (,01.0]; Upgrade schneider-electric srtl3000rmxli-nc_firmware to a higher version than 01.0,and avoid the version (,01.0]; Upgrade schneider-electric srtl3000rmxli_firmware to a higher version than 01.0,and avoid the version (,01.0]