SEVD-2021-313-03
Vulnerability from csaf_se - Published: 2021-11-09 06:30 - Updated: 2022-05-10 00:00Summary
APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices
Notes
General Security Recommendations
We strongly recommend the following industry cybersecurity best practices.
https://www.se.com/us/en/download/document/7EN52-0390/
* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.
* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
* Place all controllers in locked cabinets and never leave them in the “Program” mode.
* Never connect programming software to any network other than the network intended for that device.
* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.
* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.
* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.
For more information refer to the Schneider Electric Recommended Cybersecurity Best Practices document.
For More Information
This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.
For further information related to cybersecurity in Schneider Electric’s products, visit the company’s cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp
LEGAL DISCLAIMER
THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS “NOTIFICATION”) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN “AS-IS” BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND. SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION
About Schneider Electric
At Schneider, we believe access to energy and digital is a basic human right. We empower all to do more with less, ensuring Life Is On everywhere, for everyone, at every moment.
We provide energy and automation digital solutions for efficiency and sustainability. We combine world-leading energy technologies, real-time automation, software and services into integrated solutions for Homes, Buildings, Data Centers, Infrastructure and Industries.
We are committed to unleash the infinite possibilities of an open, global, innovative community that is passionate with our Meaningful Purpose, Inclusive and Empowered values.
www.se.com
Overview
Schneider Electric is aware of multiple vulnerabilities in its products that use the Network Management Card 2 (NMC2), Network Management Card 3 (NMC3), and the NMC embedded devices.
The NMC2 and the NMC3 cards and embedded devices allow for secure monitoring and control of APC by Schneider Electric products.
Failure to apply the mitigations provided below may risk potential data disclosure or cross-site scripting which could result in execution of malicious web code or loss of device functionality.
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "We strongly recommend the following industry cybersecurity best practices.\n\nhttps://www.se.com/us/en/download/document/7EN52-0390/\n* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.\n* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.\n* Place all controllers in locked cabinets and never leave them in the \u201cProgram\u201d mode.\n* Never connect programming software to any network other than the network intended for that device.\n* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.\n* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.\n* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.\n* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.\nFor more information refer to the Schneider Electric Recommended Cybersecurity Best Practices document. \n",
"title": "General Security Recommendations"
},
{
"category": "general",
"text": "This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.\nFor further information related to cybersecurity in Schneider Electric\u2019s products, visit the company\u2019s cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp",
"title": "For More Information"
},
{
"category": "legal_disclaimer",
"text": "THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS \u201cNOTIFICATION\u201d) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN \u201cAS-IS\u201d BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND. SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION",
"title": "LEGAL DISCLAIMER"
},
{
"category": "general",
"text": "At Schneider, we believe access to energy and digital is a basic human right. We empower all to do more with less, ensuring Life Is On everywhere, for everyone, at every moment.\n\nWe provide energy and automation digital solutions for efficiency and sustainability. We combine world-leading energy technologies, real-time automation, software and services into integrated solutions for Homes, Buildings, Data Centers, Infrastructure and Industries.\n\nWe are committed to unleash the infinite possibilities of an open, global, innovative community that is passionate with our Meaningful Purpose, Inclusive and Empowered values.\n\nwww.se.com ",
"title": "About Schneider Electric"
},
{
"category": "summary",
"text": "Schneider Electric is aware of multiple vulnerabilities in its products that use the Network Management Card 2 (NMC2), Network Management Card 3 (NMC3), and the NMC embedded devices.\nThe NMC2 and the NMC3 cards and embedded devices allow for secure monitoring and control of APC by Schneider Electric products.\nFailure to apply the mitigations provided below may risk potential data disclosure or cross-site scripting which could result in execution of malicious web code or loss of device functionality.",
"title": "Overview"
}
],
"publisher": {
"category": "vendor",
"contact_details": "cybersecurity@se.com",
"name": "Schneider Electric CPCERT",
"namespace": "https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp"
},
"references": [
{
"category": "self",
"summary": "APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices - SEVD-2021-313-03 CSAF Version",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-313-03\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=sevd-2021-313-03.json"
},
{
"category": "self",
"summary": "APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices - SEVD-2021-313-03 PDF Version",
"url": "https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2021-313-03_APC_NMC_Security_Notification_V2.0.pdf"
},
{
"category": "external",
"summary": "Recommended Cybersecurity Best Practices",
"url": "https://www.se.com/us/en/download/document/7EN52-0390/"
}
],
"title": "APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices",
"tracking": {
"current_release_date": "2022-05-10T00:00:00.00Z",
"generator": {
"date": "2022-05-10T00:00:00.00Z",
"engine": {
"name": "Schneider Electric CSAF Generator",
"version": "1.2"
}
},
"id": "SEVD-2021-313-03",
"initial_release_date": "2021-11-09T06:30:00.000Z",
"revision_history": [
{
"date": "2021-11-09T06:30:00.000Z",
"number": "1",
"summary": "Original Release"
},
{
"date": "2022-05-10T00:00:00.00Z",
"number": "2",
"summary": "Remediations added for remaining affected products: APC Power Distribution products, Cooling products, Environmental Monitoring products, and Battery Management products."
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.8",
"product": {
"name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Smart-UPS Network Management Card 2 AOS version 6.9.8 and prior",
"product_id": "1",
"product_identification_helper": {
"model_numbers": [
"AP9630CH",
"AP9630J",
"AP9630",
"AP9631",
"AP9631CH",
"AP9631J",
"AP9635",
"AP963J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Smart-UPS Network Management Card 2 AOS version 7.0.4 and later",
"product_id": "2"
}
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Smart-UPS"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.8",
"product": {
"name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra Network Management Card 2 AOS version 6.9.8 and prior",
"product_id": "3",
"product_identification_helper": {
"model_numbers": [
"AP9630CH",
"AP9630J",
"AP9630",
"AP9631",
"AP9631CH",
"AP9631J",
"AP9635",
"AP963J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra Network Management Card 2 AOS version 7.0.4 and later",
"product_id": "4"
}
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Symmetra"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.8",
"product": {
"name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Galaxy 3500 Network Management Card 2 AOS version 6.9.8 and prior",
"product_id": "5",
"product_identification_helper": {
"model_numbers": [
"AP9630CH",
"AP9630J",
"AP9630",
"AP9631",
"AP9631CH",
"AP9631J",
"AP9635",
"AP963J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Galaxy 3500 Network Management Card 2 AOS version 7.0.4 and later",
"product_id": "6"
}
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Galaxy 3500"
}
],
"category": "product_family",
"name": "1-Phase Uninterruptible Power Supply (UPS) using NMC2"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 250 (SYPX) Network Management Card 2 AOS version 6.9.6 and prior",
"product_id": "7",
"product_identification_helper": {
"model_numbers": [
"AP9630CH",
"AP9630J",
"AP9630",
"AP9631",
"AP9631CH",
"AP9631J",
"AP9635",
"AP963J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 250 (SYPX) Network Management Card 2 AOS version 7.0.4 and later",
"product_id": "8"
}
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Symmetra PX 250 (SYPX)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 500 (SYPX) Network Management Card 2 AOS version 6.9.6 and prior",
"product_id": "9",
"product_identification_helper": {
"model_numbers": [
"AP9630CH",
"AP9630J",
"AP9630",
"AP9631",
"AP9631CH",
"AP9631J",
"AP9635",
"AP963J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 500 (SYPX) Network Management Card 2 AOS version 7.0.4 and later",
"product_id": "10"
}
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Symmetra PX 500 (SYPX)"
}
],
"category": "product_family",
"name": "3-Phase Uninterruptible Power Supply (UPS) using NMC2"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 48 kW UPS (PX2) Network Management Card 2 AOS version 6.9.6 and prior",
"product_id": "11",
"product_identification_helper": {
"model_numbers": [
"AP9630CH",
"AP9630J",
"AP9630",
"AP9631",
"AP9631CH",
"AP9631J",
"AP9635",
"AP963J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 48 kW UPS (PX2) Network Management Card 2 AOS version 7.0.4 and later",
"product_id": "12"
}
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Symmetra PX 48 kW UPS (PX2)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 96 kW UPS (PX2) Network Management Card 2 AOS version 6.9.6 and prior",
"product_id": "13",
"product_identification_helper": {
"model_numbers": [
"AP9630CH",
"AP9630J",
"AP9630",
"AP9631",
"AP9631CH",
"AP9631J",
"AP9635",
"AP963J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 96 kW UPS (PX2) Network Management Card 2 AOS version 7.0.4 and later",
"product_id": "14"
}
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Symmetra PX 96 kW UPS (PX2)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 100 kW UPS (PX2) Network Management Card 2 AOS version 6.9.6 and prior",
"product_id": "15",
"product_identification_helper": {
"model_numbers": [
"AP9630CH",
"AP9630J",
"AP9630",
"AP9631",
"AP9631CH",
"AP9631J",
"AP9635",
"AP963J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 100 kW UPS (PX2) Network Management Card 2 AOS version 7.0.4 and later",
"product_id": "16"
}
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Symmetra PX 100 kW UPS (PX2)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 160 kW UPS (PX2) Network Management Card 2 AOS version 6.9.6 and prior",
"product_id": "17",
"product_identification_helper": {
"model_numbers": [
"AP9630CH",
"AP9630J",
"AP9630",
"AP9631",
"AP9631CH",
"AP9631J",
"AP9635",
"AP963J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 160 kW UPS (PX2) Network Management Card 2 AOS version 7.0.4 and later",
"product_id": "18"
}
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Symmetra PX 160 kW UPS (PX2)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 20 kW UPS (SY3P) Network Management Card 2 AOS version 6.9.6 and prior",
"product_id": "19",
"product_identification_helper": {
"model_numbers": [
"AP9630CH",
"AP9630J",
"AP9630",
"AP9631",
"AP9631CH",
"AP9631J",
"AP9635",
"AP963J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 20 kW UPS (SY3P) Network Management Card 2 AOS version 7.0.4 and later",
"product_id": "20"
}
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Symmetra PX 20 kW UPS (SY3P)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 40 kW UPS (SY3P) Network Management Card 2 AOS version 6.9.6 and prior",
"product_id": "21",
"product_identification_helper": {
"model_numbers": [
"AP9630CH",
"AP9630J",
"AP9630",
"AP9631",
"AP9631CH",
"AP9631J",
"AP9635",
"AP963J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 40 kW UPS (SY3P) Network Management Card 2 AOS version 7.0.4 and later",
"product_id": "22"
}
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Symmetra PX 40 kW UPS (SY3P)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Gutor (SXW, GVX) Network Management Card 2 AOS version 6.9.6 and prior",
"product_id": "23",
"product_identification_helper": {
"model_numbers": [
"AP9630CH",
"AP9630J",
"AP9630",
"AP9631",
"AP9631CH",
"AP9631J",
"AP9635",
"AP963J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Gutor (SXW, GVX) Network Management Card 2 AOS version 7.0.4 and later",
"product_id": "24"
}
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Gutor (SXW, GVX)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Galaxy 3500 (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) Network Management Card 2 AOS version 6.9.6 and prior",
"product_id": "25",
"product_identification_helper": {
"model_numbers": [
"AP9630CH",
"AP9630J",
"AP9630",
"AP9631",
"AP9631CH",
"AP9631J",
"AP9635",
"AP963J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Galaxy 3500 (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) Network Management Card 2 AOS version 7.0.4 and later",
"product_id": "26"
}
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Galaxy 3500 (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU)"
}
],
"category": "product_family",
"name": "3-Phase Uninterruptible Power Supply (UPS) using NMC2"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.4.2.1",
"product": {
"name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Smart-UPS Network Management Card 3 AOS version 1.4.2.1 and prior",
"product_id": "27",
"product_identification_helper": {
"model_numbers": [
"AP9640",
"AP9640J",
"AP9641",
"AP9641J",
"AP9643",
"AP9643J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=1.5",
"product": {
"name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Smart-UPS Network Management Card 3 AOS version 1.5 and later",
"product_id": "28"
}
}
],
"category": "host_name",
"name": "Network Management Card 3 AOS"
}
],
"category": "product_name",
"name": "Smart-UPS"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.4.2.1",
"product": {
"name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Symmetra Network Management Card 3 AOS version 1.4.2.1 and prior",
"product_id": "29",
"product_identification_helper": {
"model_numbers": [
"AP9640",
"AP9640J",
"AP9641",
"AP9641J",
"AP9643",
"AP9643J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=1.5",
"product": {
"name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Symmetra Network Management Card 3 AOS version 1.5 and later",
"product_id": "30"
}
}
],
"category": "host_name",
"name": "Network Management Card 3 AOS"
}
],
"category": "product_name",
"name": "Symmetra"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.4.2.1",
"product": {
"name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Galaxy 3500 Network Management Card 2 AOS Network Management Card 3 AOS version 1.4.2.1 and prior",
"product_id": "31",
"product_identification_helper": {
"model_numbers": [
"AP9640",
"AP9640J",
"AP9641",
"AP9641J",
"AP9643",
"AP9643J"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=1.5",
"product": {
"name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Galaxy 3500 Network Management Card 2 AOS Network Management Card 3 AOS version 1.5 and later",
"product_id": "32"
}
}
],
"category": "host_name",
"name": "Network Management Card 3 AOS"
}
],
"category": "host_name",
"name": "Network Management Card 2 AOS"
}
],
"category": "product_name",
"name": "Galaxy 3500"
}
],
"category": "product_family",
"name": "1-Phase Uninterruptible Power Supply (UPS) using NMC3"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric APC Rack Power Distribution Units (PDU) using NMC2 2G Metered/Switched Rack PDUs with embedded NMC2 Network Management Card AOS 2 version 6.9.6 and prior",
"product_id": "33",
"product_identification_helper": {
"model_numbers": [
"AP84xx",
"AP86xx",
"AP88xx",
"AP89xx"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.6",
"product": {
"name": "Schneider Electric APC Rack Power Distribution Units (PDU) using NMC2 2G Metered/Switched Rack PDUs with embedded NMC2 Network Management Card AOS 2 version 7.0.6 and later",
"product_id": "34"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "2G Metered/Switched Rack PDUs with embedded NMC2"
}
],
"category": "product_family",
"name": "APC Rack Power Distribution Units (PDU) using NMC2"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.4.0",
"product": {
"name": "Schneider Electric APC Rack Power Distribution Units (PDU) using NMC3 2G Metered/Switched Rack PDUs with embedded NMC3 Network Management Card 3 AOS version 1.4.0 and prior",
"product_id": "35",
"product_identification_helper": {
"model_numbers": [
"APDU99xx"
]
}
}
},
{
"category": "product_version",
"name": "1.5.0",
"product": {
"name": "Schneider Electric APC Rack Power Distribution Units (PDU) using NMC3 2G Metered/Switched Rack PDUs with embedded NMC3 Network Management Card 3 AOS 1.5.0",
"product_id": "36"
}
}
],
"category": "host_name",
"name": "Network Management Card 3 AOS"
}
],
"category": "product_name",
"name": "2G Metered/Switched Rack PDUs with embedded NMC3"
}
],
"category": "product_family",
"name": "APC Rack Power Distribution Units (PDU) using NMC3"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric APC 3-Phase Power Distribution Products using NMC2 Galaxy RPP Network Management Card AOS 2 version 6.9.6 and prior",
"product_id": "37"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric APC 3-Phase Power Distribution Products using NMC2 Galaxy RPP Network Management Card AOS 2 version 7.0.4 and later",
"product_id": "38"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "Galaxy RPP"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric APC 3-Phase Power Distribution Products using NMC2 GRPPIP2X84 Network Management Card AOS 2 version 6.9.6 and prior",
"product_id": "39"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric APC 3-Phase Power Distribution Products using NMC2 GRPPIP2X84 Network Management Card AOS 2 version 7.0.4 and later",
"product_id": "40"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "GRPPIP2X84"
}
],
"category": "product_family",
"name": "APC 3-Phase Power Distribution Products using NMC2"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) for InfraStruxure 150 kVA PDU with 84 Poles (X84P) PDPB150G6F Network Management Card AOS 2 version 6.9.6 and prior",
"product_id": "41"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) for InfraStruxure 150 kVA PDU with 84 Poles (X84P) PDPB150G6F Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "42"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PDPB150G6F"
}
],
"category": "product_family",
"name": "Network Management Card 2 (NMC2) for InfraStruxure 150 kVA PDU with 84 Poles (X84P)"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40G6FK1-M Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "43"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40G6FK1-M Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "44"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PD40G6FK1-M"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40F6FK1-M Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "45"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40F6FK1-M Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "46"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PD40F6FK1-M"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40L6FK1-M Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "47"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40L6FK1-M Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "48"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PD40L6FK1-M"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PDRPPNX10M Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "49"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PDRPPNX10M Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "50"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PDRPPNX10M"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60G6FK1 Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "51"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60G6FK1 Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "52"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PD60G6FK1"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60F6FK1 Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "53"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60F6FK1 Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "54"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PD60F6FK1"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PDRPPNX10 Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "55"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PDRPPNX10 Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "56"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PDRPPNX10"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40E5EK20-M Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "57"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40E5EK20-M Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "58"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PD40E5EK20-M"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40H5EK20-M Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "59"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40H5EK20-M Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "60"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PD40H5EK20-M"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60L6FK1 Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "61"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60L6FK1 Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "62"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PD60L6FK1"
}
],
"category": "product_family",
"name": "Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU)"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM150G6F Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "63"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM150G6F Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "64"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PDPM150G6F"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM150L6F Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "65"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM150L6F Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "66"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PDPM150L6F"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM175G6H Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "67"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM175G6H Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "68"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PDPM175G6H"
}
],
"category": "product_family",
"name": "Network Management Card 2 for Modular 150/175kVA PDU (XRDP)"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-ALA Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "69"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-ALA Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "70"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PMM400-ALA"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-ALAX Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "71"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-ALAX Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "72"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PMM400-ALAX"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-CUB Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "73"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-CUB Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "74"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PMM400-CUB"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-ALA Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "75"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-ALA Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "76"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PMM500-ALA"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-ALAX Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "77"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-ALAX Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "78"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PMM500-ALAX"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-CUB Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "79"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-CUB Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "80"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PMM500-CUB"
}
],
"category": "product_family",
"name": "Network Management Card 2 for 400 and 500 kVA (PMM)"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM72F-5U Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "81"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM72F-5U Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "82"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PDPM72F-5U"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM138H-5U Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "83"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM138H-5U Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "84"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PDPM138H-5U"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM144F Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "85"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM144F Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "86"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PDPM144F"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM138H-R Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "87"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM138H-R Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "88"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PDPM138H-R"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM277H Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "89"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM277H Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "90"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PDPM277H"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM288G6H Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "91"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM288G6H Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "92"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "PDPM288G6H"
}
],
"category": "product_family",
"name": "Network Management Card 2 for Modular PDU (XRDP2G)"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Rack Automatic Transfer Switches (ATS) Embedded NMC2 Rack Automatic Transfer Switches Network Management Card AOS 2 (ATS4G) \u003c=6.9.6",
"product_id": "93",
"product_identification_helper": {
"model_numbers": [
"AP44xx"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Rack Automatic Transfer Switches (ATS) Embedded NMC2 Rack Automatic Transfer Switches Network Management Card AOS 2 (ATS4G) \u003e=7.0.4",
"product_id": "94"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2 (ATS4G)"
}
],
"category": "product_name",
"name": "Rack Automatic Transfer Switches"
}
],
"category": "product_family",
"name": "Rack Automatic Transfer Switches (ATS) Embedded NMC2"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Environmental Monitoring Unit with embedded NMC2 (NB250) NetBotz NBRK0250 Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "95"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Environmental Monitoring Unit with embedded NMC2 (NB250) NetBotz NBRK0250 Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "96"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "NetBotz NBRK0250"
}
],
"category": "product_family",
"name": "Environmental Monitoring Unit with embedded NMC2 (NB250)"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Battery Management Products Network Management Card 2 (NMC2) AP9922 Battery Management System (BM4) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "97",
"product_identification_helper": {
"model_numbers": [
"BM4"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Battery Management Products Network Management Card 2 (NMC2) AP9922 Battery Management System (BM4) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "98"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "AP9922 Battery Management System (BM4)"
}
],
"category": "product_family",
"name": "Battery Management Products Network Management Card 2 (NMC2)"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Smart-UPS Network Management Card 2 AOS \u003c=6.9.8",
"product_id": "99",
"product_identification_helper": {
"model_numbers": [
"MDC"
]
}
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Battery Management Products EcoStruxure Micro Data Center (MDC) Network Management Card AOS 2 (ATS4G) \u003e=7.0.4",
"product_id": "100"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2 (ATS4G)"
}
],
"category": "product_name",
"name": "EcoStruxure Micro Data Center (MDC)"
}
],
"category": "product_family",
"name": "Battery Management Products"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRP5xx, ACRP1xx, ACRD5xx, and ACRC5xx SKUs (ACRP2G) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "101"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRP5xx, ACRP1xx, ACRD5xx, and ACRC5xx SKUs (ACRP2G) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "102"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "InRow Cooling for series ACRP5xx, ACRP1xx, ACRD5xx, and ACRC5xx SKUs (ACRP2G)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRC10x SKUs (RC10X2G) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "103"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRC10x SKUs (RC10X2G) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "104"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "InRow Cooling for series ACRC10x SKUs (RC10X2G)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRD6xx and ACRC6xx SKUs (ACRD2G) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "105"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRD6xx and ACRC6xx SKUs (ACRD2G) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "106"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "InRow Cooling for series ACRD6xx and ACRC6xx SKUs (ACRD2G)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling Display for series ACRD3xx (ACRC2G) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "107"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling Display for series ACRD3xx (ACRC2G) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "108"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "InRow Cooling Display for series ACRD3xx (ACRC2G)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACSC1xx SKUs (SC2G) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "109"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACSC1xx SKUs (SC2G) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "110"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "InRow Cooling for series ACSC1xx SKUs (SC2G)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRD1xx and ACRD2xx (ACRPTK2G) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "111"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRD1xx and ACRD2xx (ACRPTK2G) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "112"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "InRow Cooling for series ACRD1xx and ACRD2xx (ACRPTK2G)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Ecoflair IAEC25/50 Air Economizer Display (EB2G) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "113"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Ecoflair IAEC25/50 Air Economizer Display (EB2G) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "114"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "Ecoflair IAEC25/50 Air Economizer Display (EB2G)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair SP UCF0481I, UCF0341I (UNFLRSP) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "115"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair SP UCF0481I, UCF0341I (UNFLRSP) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "116"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "Uniflair SP UCF0481I, UCF0341I (UNFLRSP)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair AM Perimeter Cooling for SKUs: SDCC, SDCV, SDAC, ADAV, SDWC, SDWV, SUAC, SUAV, SUWC, and SUWV (AMICO) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "117"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair AM Perimeter Cooling for SKUs: SDCC, SDCV, SDAC, ADAV, SDWC, SDWV, SUAC, SUAV, SUWC, and SUWV (AMICO) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "118"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "Uniflair AM Perimeter Cooling for SKUs: SDCC, SDCV, SDAC, ADAV, SDWC, SDWV, SUAC, SUAV, SUWC, and SUWV (AMICO)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair LE DX Perimeter Cooling Display for SKUs: IDAV, IDEV, IDWV, IUAV, IUEV, IUWV, IXAV, IXEV, IXWV, LDAV, LDEV, and LDWV (LEDX2G) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "119"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair LE DX Perimeter Cooling Display for SKUs: IDAV, IDEV, IDWV, IUAV, IUEV, IUWV, IXAV, IXEV, IXWV, LDAV, LDEV, and LDWV (LEDX2G) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "120"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "Uniflair LE DX Perimeter Cooling Display for SKUs: IDAV, IDEV, IDWV, IUAV, IUEV, IUWV, IXAV, IXEV, IXWV, LDAV, LDEV, and LDWV (LEDX2G)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair LEL Perimeter Cooling for SKUs: LDCV, LUCV (UNFLRLEL) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "121"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair LEL Perimeter Cooling for SKUs: LDCV, LUCV (UNFLRLEL) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "122"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "Uniflair LEL Perimeter Cooling for SKUs: LDCV, LUCV (UNFLRLEL)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair Display for Aquaflair TSA/TRA Chiller (UNFLRTSA) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "123"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair Display for Aquaflair TSA/TRA Chiller (UNFLRTSA) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "124"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "Uniflair Display for Aquaflair TSA/TRA Chiller (UNFLRTSA)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair Display for Trim Chiller (TRMCHLR) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "125"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair Display for Trim Chiller (TRMCHLR) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "126"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "Uniflair Display for Trim Chiller (TRMCHLR)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair BCWC Chiller (AQUACENTR) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "127"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair BCWC Chiller (AQUACENTR) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "128"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "Uniflair BCWC Chiller (AQUACENTR)"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=6.9.6",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Refrigerant Distribution Unit: ACDA9xx (RDU) Network Management Card AOS 2 \u003c=6.9.6",
"product_id": "129"
}
},
{
"category": "product_version_range",
"name": "\u003e=7.0.4",
"product": {
"name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Refrigerant Distribution Unit: ACDA9xx (RDU) Network Management Card AOS 2 \u003e=7.0.4",
"product_id": "130"
}
}
],
"category": "host_name",
"name": "Network Management Card AOS 2"
}
],
"category": "product_name",
"name": "Refrigerant Distribution Unit: ACDA9xx (RDU)"
}
],
"category": "product_family",
"name": "Network Management Card 2 (NMC2) Cooling Products"
}
],
"category": "vendor",
"name": "Schneider Electric"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Chua Wei Kiat",
"Thanh Nguyen"
],
"organization": "Fortinet\u2019s Fortiguard Labs"
}
],
"cve": "CVE-2021-22810",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "description",
"text": "A CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027) vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"2",
"4",
"6",
"8",
"10",
"12",
"14",
"16",
"18",
"20",
"22",
"24",
"26",
"28",
"30",
"32",
"34",
"36",
"38",
"40",
"42",
"44",
"46",
"48",
"50",
"52",
"54",
"56",
"58",
"60",
"62",
"64",
"66",
"68",
"70",
"72",
"74",
"76",
"78",
"80",
"82",
"84",
"86",
"88",
"90",
"92",
"94",
"96",
"98",
"100",
"102",
"104",
"106",
"108",
"110",
"112",
"114",
"116",
"118",
"120",
"122",
"124",
"126",
"128",
"130"
],
"known_affected": [
"1",
"3",
"5",
"7",
"9",
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25",
"27",
"29",
"31",
"33",
"39",
"35",
"37",
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91",
"93",
"95",
"97",
"99",
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"1"
],
"url": "https://www.apc.com/in/en/product/SFSUMX704/ups-network-management-card-v7-0-4-firmware-for-smartups-galaxy-3500-with-ap9630-31-35/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"3",
"5"
],
"url": "https://download.schneider-electric.com/files?p_File_Name=990-3403Z-EN.pdf\u0026p_Doc_Ref=SPD_ARAJ-9TN74X_EN\u0026p_enDocType=User+guide"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"1",
"2",
"5"
],
"url": "https://www.apc.com/in/en/product/SFSY704/ups-network-management-card-v7-0-4-firmware-for-symmetra-1phase-with-ap9630-31-35/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SYPX application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for SYPX application upgrade.",
"product_ids": [
"7",
"9"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later for the Symmetra PX 48/96/100/160 kW UPS (PX2), Symmetra PX 20/40 kW UPS (SY3P), Gutor (SXW, GVX), and Galaxy (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) includes fixes for these vulnerabilities has been released.\nPlease contact your local support team for application upgrades for these models.",
"product_ids": [
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"27",
"31"
],
"url": "https://www.se.com/ww/en/download/document/APC_NMC3_SU_1511_EN/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"29"
],
"url": "https://www.se.com/ww/en/download/document/APC_NMC3_SY_1511_EN/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"27",
"29",
"31"
],
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-SURELNOTE_EN\u0026p_enDocType=User+guide\u0026p_File_Name=990-6322E-EN.pdf"
},
{
"category": "vendor_fix",
"details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"33"
],
"url": "https://download.schneider-electric.com/files?p_enDocType=Firmware\u0026p_Doc_Ref=APC_RPDU2G_706_EN\u0026p_File_Name=apc_hw05_aos704_rpdu2g706_bootmon109.exe"
},
{
"category": "vendor_fix",
"details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"33"
],
"url": "https://sk.se.com/doc_info.aspx?DocRef=990-9958L_EN\u0026isdvd=False\u0026df=3\u0026gid=891285"
},
{
"category": "vendor_fix",
"details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download",
"product_ids": [
"35"
],
"url": "https://ckm-content.se.com/ckmContent/sfc/servlet.shepherd/document/download/0698V00000KscmiQAB"
},
{
"category": "vendor_fix",
"details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download",
"product_ids": [
"35"
],
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=990-6391_EN\u0026p_enDocType=User+guide\u0026p_File_Name=990-6391B.pdf"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 RPP application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"37",
"39"
],
"url": "https://www.se.com/uk/en/download/document/APC_RPP_704_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 for X84P, XPDU, XRDP, PMM, and XRDP2G applications includes fixes for these vulnerabilities.\nPlease contact your local support team for application upgrade.",
"product_ids": [
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"56",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 ATS4G application include fixes for these vulnerabilities and are available for download",
"product_ids": [
"93"
],
"url": "https://www.se.com/ww/en/download/document/APC_ATS4G_704_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 of these cooling applications include fixes for these vulnerabilities and have been released.\nPlease contact your local support team for upgrades.",
"product_ids": [
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 NB250 application includes fixes for these vulnerabilities and has been released",
"product_ids": [
"95"
],
"url": "https://www.se.com/ww/en/download/document/APC_NB250_706_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 BM4 application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for BM4 application upgrade.",
"product_ids": [
"97"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 MDC application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for MDC application upgrade.",
"product_ids": [
"100"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"3",
"5",
"7",
"9",
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25",
"27",
"29",
"31",
"33",
"39",
"35",
"37",
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91",
"93",
"95",
"97",
"99",
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
]
}
],
"title": "CVE-2021-22810"
},
{
"acknowledgments": [
{
"names": [
"Chua Wei Kiat",
"Thanh Nguyen"
],
"organization": "Fortinet\u2019s Fortiguard Labs"
}
],
"cve": "CVE-2021-22811",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "description",
"text": "A CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027) vulnerability exists that could cause script execution when the request of a privileged account accessing the vulnerable web page is intercepted.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"2",
"4",
"6",
"8",
"10",
"12",
"14",
"16",
"18",
"20",
"22",
"24",
"26",
"28",
"30",
"32",
"34",
"36",
"38",
"40",
"42",
"44",
"46",
"48",
"50",
"52",
"54",
"56",
"58",
"60",
"62",
"64",
"66",
"68",
"70",
"72",
"74",
"76",
"78",
"80",
"82",
"84",
"86",
"88",
"90",
"92",
"94",
"96",
"98",
"100",
"102",
"104",
"106",
"108",
"110",
"112",
"114",
"116",
"118",
"120",
"122",
"124",
"126",
"128",
"130"
],
"known_affected": [
"1",
"3",
"5",
"7",
"9",
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25",
"27",
"29",
"31",
"33",
"39",
"35",
"37",
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91",
"93",
"95",
"97",
"99",
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"1"
],
"url": "https://www.apc.com/in/en/product/SFSUMX704/ups-network-management-card-v7-0-4-firmware-for-smartups-galaxy-3500-with-ap9630-31-35/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"3",
"5"
],
"url": "https://download.schneider-electric.com/files?p_File_Name=990-3403Z-EN.pdf\u0026p_Doc_Ref=SPD_ARAJ-9TN74X_EN\u0026p_enDocType=User+guide"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"1",
"2",
"5"
],
"url": "https://www.apc.com/in/en/product/SFSY704/ups-network-management-card-v7-0-4-firmware-for-symmetra-1phase-with-ap9630-31-35/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SYPX application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for SYPX application upgrade.",
"product_ids": [
"7",
"9"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later for the Symmetra PX 48/96/100/160 kW UPS (PX2), Symmetra PX 20/40 kW UPS (SY3P), Gutor (SXW, GVX), and Galaxy (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) includes fixes for these vulnerabilities has been released.\nPlease contact your local support team for application upgrades for these models.",
"product_ids": [
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"27",
"31"
],
"url": "https://www.se.com/ww/en/download/document/APC_NMC3_SU_1511_EN/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"29"
],
"url": "https://www.se.com/ww/en/download/document/APC_NMC3_SY_1511_EN/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"27",
"29",
"31"
],
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-SURELNOTE_EN\u0026p_enDocType=User+guide\u0026p_File_Name=990-6322E-EN.pdf"
},
{
"category": "vendor_fix",
"details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"33"
],
"url": "https://download.schneider-electric.com/files?p_enDocType=Firmware\u0026p_Doc_Ref=APC_RPDU2G_706_EN\u0026p_File_Name=apc_hw05_aos704_rpdu2g706_bootmon109.exe"
},
{
"category": "vendor_fix",
"details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"33"
],
"url": "https://sk.se.com/doc_info.aspx?DocRef=990-9958L_EN\u0026isdvd=False\u0026df=3\u0026gid=891285"
},
{
"category": "vendor_fix",
"details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download",
"product_ids": [
"35"
],
"url": "https://ckm-content.se.com/ckmContent/sfc/servlet.shepherd/document/download/0698V00000KscmiQAB"
},
{
"category": "vendor_fix",
"details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download",
"product_ids": [
"35"
],
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=990-6391_EN\u0026p_enDocType=User+guide\u0026p_File_Name=990-6391B.pdf"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 RPP application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"37",
"39"
],
"url": "https://www.se.com/uk/en/download/document/APC_RPP_704_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 for X84P, XPDU, XRDP, PMM, and XRDP2G applications includes fixes for these vulnerabilities.\nPlease contact your local support team for application upgrade.",
"product_ids": [
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"56",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 ATS4G application include fixes for these vulnerabilities and are available for download",
"product_ids": [
"93"
],
"url": "https://www.se.com/ww/en/download/document/APC_ATS4G_704_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 of these cooling applications include fixes for these vulnerabilities and have been released.\nPlease contact your local support team for upgrades.",
"product_ids": [
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 NB250 application includes fixes for these vulnerabilities and has been released",
"product_ids": [
"95"
],
"url": "https://www.se.com/ww/en/download/document/APC_NB250_706_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 BM4 application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for BM4 application upgrade.",
"product_ids": [
"97"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 MDC application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for MDC application upgrade.",
"product_ids": [
"100"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"3",
"5",
"7",
"9",
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25",
"27",
"29",
"31",
"33",
"39",
"35",
"37",
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91",
"93",
"95",
"97",
"99",
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
]
}
],
"title": "CVE-2021-22811"
},
{
"acknowledgments": [
{
"names": [
"Chua Wei Kiat",
"Thanh Nguyen"
],
"organization": "Fortinet\u2019s Fortiguard Labs"
}
],
"cve": "CVE-2021-22812",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "description",
"text": "A CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027) vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"2",
"4",
"6",
"8",
"10",
"12",
"14",
"16",
"18",
"20",
"22",
"24",
"26",
"28",
"30",
"32",
"34",
"36",
"38",
"40",
"42",
"44",
"46",
"48",
"50",
"52",
"54",
"56",
"58",
"60",
"62",
"64",
"66",
"68",
"70",
"72",
"74",
"76",
"78",
"80",
"82",
"84",
"86",
"88",
"90",
"92",
"94",
"96",
"98",
"100",
"102",
"104",
"106",
"108",
"110",
"112",
"114",
"116",
"118",
"120",
"122",
"124",
"126",
"128",
"130"
],
"known_affected": [
"1",
"3",
"5",
"7",
"9",
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25",
"27",
"29",
"31",
"33",
"39",
"35",
"37",
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91",
"93",
"95",
"97",
"99",
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"1"
],
"url": "https://www.apc.com/in/en/product/SFSUMX704/ups-network-management-card-v7-0-4-firmware-for-smartups-galaxy-3500-with-ap9630-31-35/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"3",
"5"
],
"url": "https://download.schneider-electric.com/files?p_File_Name=990-3403Z-EN.pdf\u0026p_Doc_Ref=SPD_ARAJ-9TN74X_EN\u0026p_enDocType=User+guide"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"1",
"2",
"5"
],
"url": "https://www.apc.com/in/en/product/SFSY704/ups-network-management-card-v7-0-4-firmware-for-symmetra-1phase-with-ap9630-31-35/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SYPX application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for SYPX application upgrade.",
"product_ids": [
"7",
"9"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later for the Symmetra PX 48/96/100/160 kW UPS (PX2), Symmetra PX 20/40 kW UPS (SY3P), Gutor (SXW, GVX), and Galaxy (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) includes fixes for these vulnerabilities has been released.\nPlease contact your local support team for application upgrades for these models.",
"product_ids": [
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"27",
"31"
],
"url": "https://www.se.com/ww/en/download/document/APC_NMC3_SU_1511_EN/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"29"
],
"url": "https://www.se.com/ww/en/download/document/APC_NMC3_SY_1511_EN/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"27",
"29",
"31"
],
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-SURELNOTE_EN\u0026p_enDocType=User+guide\u0026p_File_Name=990-6322E-EN.pdf"
},
{
"category": "vendor_fix",
"details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"33"
],
"url": "https://download.schneider-electric.com/files?p_enDocType=Firmware\u0026p_Doc_Ref=APC_RPDU2G_706_EN\u0026p_File_Name=apc_hw05_aos704_rpdu2g706_bootmon109.exe"
},
{
"category": "vendor_fix",
"details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"33"
],
"url": "https://sk.se.com/doc_info.aspx?DocRef=990-9958L_EN\u0026isdvd=False\u0026df=3\u0026gid=891285"
},
{
"category": "vendor_fix",
"details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download",
"product_ids": [
"35"
],
"url": "https://ckm-content.se.com/ckmContent/sfc/servlet.shepherd/document/download/0698V00000KscmiQAB"
},
{
"category": "vendor_fix",
"details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download",
"product_ids": [
"35"
],
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=990-6391_EN\u0026p_enDocType=User+guide\u0026p_File_Name=990-6391B.pdf"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 RPP application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"37",
"39"
],
"url": "https://www.se.com/uk/en/download/document/APC_RPP_704_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 for X84P, XPDU, XRDP, PMM, and XRDP2G applications includes fixes for these vulnerabilities.\nPlease contact your local support team for application upgrade.",
"product_ids": [
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"56",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 ATS4G application include fixes for these vulnerabilities and are available for download",
"product_ids": [
"93"
],
"url": "https://www.se.com/ww/en/download/document/APC_ATS4G_704_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 of these cooling applications include fixes for these vulnerabilities and have been released.\nPlease contact your local support team for upgrades.",
"product_ids": [
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 NB250 application includes fixes for these vulnerabilities and has been released",
"product_ids": [
"95"
],
"url": "https://www.se.com/ww/en/download/document/APC_NB250_706_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 BM4 application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for BM4 application upgrade.",
"product_ids": [
"97"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 MDC application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for MDC application upgrade.",
"product_ids": [
"100"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"3",
"5",
"7",
"9",
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25",
"27",
"29",
"31",
"33",
"39",
"35",
"37",
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91",
"93",
"95",
"97",
"99",
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
]
}
],
"title": "CVE-2021-22812"
},
{
"acknowledgments": [
{
"names": [
"Chua Wei Kiat",
"Thanh Nguyen"
],
"organization": "Fortinet\u2019s Fortiguard Labs"
}
],
"cve": "CVE-2021-22813",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "description",
"text": "A CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027) vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"2",
"4",
"6",
"8",
"10",
"12",
"14",
"16",
"18",
"20",
"22",
"24",
"26",
"28",
"30",
"32",
"34",
"36",
"38",
"40",
"42",
"44",
"46",
"48",
"50",
"52",
"54",
"56",
"58",
"60",
"62",
"64",
"66",
"68",
"70",
"72",
"74",
"76",
"78",
"80",
"82",
"84",
"86",
"88",
"90",
"92",
"94",
"96",
"98",
"100",
"102",
"104",
"106",
"108",
"110",
"112",
"114",
"116",
"118",
"120",
"122",
"124",
"126",
"128",
"130"
],
"known_affected": [
"1",
"3",
"5",
"7",
"9",
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25",
"27",
"29",
"31",
"33",
"39",
"35",
"37",
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91",
"93",
"95",
"97",
"99",
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"1"
],
"url": "https://www.apc.com/in/en/product/SFSUMX704/ups-network-management-card-v7-0-4-firmware-for-smartups-galaxy-3500-with-ap9630-31-35/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"3",
"5"
],
"url": "https://download.schneider-electric.com/files?p_File_Name=990-3403Z-EN.pdf\u0026p_Doc_Ref=SPD_ARAJ-9TN74X_EN\u0026p_enDocType=User+guide"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"1",
"2",
"5"
],
"url": "https://www.apc.com/in/en/product/SFSY704/ups-network-management-card-v7-0-4-firmware-for-symmetra-1phase-with-ap9630-31-35/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SYPX application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for SYPX application upgrade.",
"product_ids": [
"7",
"9"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later for the Symmetra PX 48/96/100/160 kW UPS (PX2), Symmetra PX 20/40 kW UPS (SY3P), Gutor (SXW, GVX), and Galaxy (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) includes fixes for these vulnerabilities has been released.\nPlease contact your local support team for application upgrades for these models.",
"product_ids": [
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"27",
"31"
],
"url": "https://www.se.com/ww/en/download/document/APC_NMC3_SU_1511_EN/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"29"
],
"url": "https://www.se.com/ww/en/download/document/APC_NMC3_SY_1511_EN/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"27",
"29",
"31"
],
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-SURELNOTE_EN\u0026p_enDocType=User+guide\u0026p_File_Name=990-6322E-EN.pdf"
},
{
"category": "vendor_fix",
"details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"33"
],
"url": "https://download.schneider-electric.com/files?p_enDocType=Firmware\u0026p_Doc_Ref=APC_RPDU2G_706_EN\u0026p_File_Name=apc_hw05_aos704_rpdu2g706_bootmon109.exe"
},
{
"category": "vendor_fix",
"details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"33"
],
"url": "https://sk.se.com/doc_info.aspx?DocRef=990-9958L_EN\u0026isdvd=False\u0026df=3\u0026gid=891285"
},
{
"category": "vendor_fix",
"details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download",
"product_ids": [
"35"
],
"url": "https://ckm-content.se.com/ckmContent/sfc/servlet.shepherd/document/download/0698V00000KscmiQAB"
},
{
"category": "vendor_fix",
"details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download",
"product_ids": [
"35"
],
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=990-6391_EN\u0026p_enDocType=User+guide\u0026p_File_Name=990-6391B.pdf"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 RPP application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"37",
"39"
],
"url": "https://www.se.com/uk/en/download/document/APC_RPP_704_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 for X84P, XPDU, XRDP, PMM, and XRDP2G applications includes fixes for these vulnerabilities.\nPlease contact your local support team for application upgrade.",
"product_ids": [
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"56",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 ATS4G application include fixes for these vulnerabilities and are available for download",
"product_ids": [
"93"
],
"url": "https://www.se.com/ww/en/download/document/APC_ATS4G_704_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 of these cooling applications include fixes for these vulnerabilities and have been released.\nPlease contact your local support team for upgrades.",
"product_ids": [
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 NB250 application includes fixes for these vulnerabilities and has been released",
"product_ids": [
"95"
],
"url": "https://www.se.com/ww/en/download/document/APC_NB250_706_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 BM4 application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for BM4 application upgrade.",
"product_ids": [
"97"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 MDC application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for MDC application upgrade.",
"product_ids": [
"100"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"3",
"5",
"7",
"9",
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25",
"27",
"29",
"31",
"33",
"39",
"35",
"37",
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91",
"93",
"95",
"97",
"99",
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
]
}
],
"title": "CVE-2021-22813"
},
{
"acknowledgments": [
{
"names": [
"Andrea Palanca"
],
"organization": "Nozomi Networks"
}
],
"cve": "CVE-2021-22814",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "description",
"text": "A CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027) vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"2",
"4",
"6",
"8",
"10",
"12",
"14",
"16",
"18",
"20",
"22",
"24",
"26",
"28",
"30",
"32",
"34",
"36",
"38",
"40",
"42",
"44",
"46",
"48",
"50",
"52",
"54",
"56",
"58",
"60",
"62",
"64",
"66",
"68",
"70",
"72",
"74",
"76",
"78",
"80",
"82",
"84",
"86",
"88",
"90",
"92",
"94",
"96",
"98",
"100",
"102",
"104",
"106",
"108",
"110",
"112",
"114",
"116",
"118",
"120",
"122",
"124",
"126",
"128",
"130"
],
"known_affected": [
"1",
"3",
"5",
"7",
"9",
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25",
"27",
"29",
"31",
"33",
"39",
"35",
"37",
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91",
"93",
"95",
"97",
"99",
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"1"
],
"url": "https://www.apc.com/in/en/product/SFSUMX704/ups-network-management-card-v7-0-4-firmware-for-smartups-galaxy-3500-with-ap9630-31-35/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"3",
"5"
],
"url": "https://download.schneider-electric.com/files?p_File_Name=990-3403Z-EN.pdf\u0026p_Doc_Ref=SPD_ARAJ-9TN74X_EN\u0026p_enDocType=User+guide"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"1",
"2",
"5"
],
"url": "https://www.apc.com/in/en/product/SFSY704/ups-network-management-card-v7-0-4-firmware-for-symmetra-1phase-with-ap9630-31-35/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SYPX application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for SYPX application upgrade.",
"product_ids": [
"7",
"9"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later for the Symmetra PX 48/96/100/160 kW UPS (PX2), Symmetra PX 20/40 kW UPS (SY3P), Gutor (SXW, GVX), and Galaxy (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) includes fixes for these vulnerabilities has been released.\nPlease contact your local support team for application upgrades for these models.",
"product_ids": [
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"27",
"31"
],
"url": "https://www.se.com/ww/en/download/document/APC_NMC3_SU_1511_EN/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"29"
],
"url": "https://www.se.com/ww/en/download/document/APC_NMC3_SY_1511_EN/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"27",
"29",
"31"
],
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-SURELNOTE_EN\u0026p_enDocType=User+guide\u0026p_File_Name=990-6322E-EN.pdf"
},
{
"category": "vendor_fix",
"details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"33"
],
"url": "https://download.schneider-electric.com/files?p_enDocType=Firmware\u0026p_Doc_Ref=APC_RPDU2G_706_EN\u0026p_File_Name=apc_hw05_aos704_rpdu2g706_bootmon109.exe"
},
{
"category": "vendor_fix",
"details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"33"
],
"url": "https://sk.se.com/doc_info.aspx?DocRef=990-9958L_EN\u0026isdvd=False\u0026df=3\u0026gid=891285"
},
{
"category": "vendor_fix",
"details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download",
"product_ids": [
"35"
],
"url": "https://ckm-content.se.com/ckmContent/sfc/servlet.shepherd/document/download/0698V00000KscmiQAB"
},
{
"category": "vendor_fix",
"details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download",
"product_ids": [
"35"
],
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=990-6391_EN\u0026p_enDocType=User+guide\u0026p_File_Name=990-6391B.pdf"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 RPP application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"37",
"39"
],
"url": "https://www.se.com/uk/en/download/document/APC_RPP_704_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 for X84P, XPDU, XRDP, PMM, and XRDP2G applications includes fixes for these vulnerabilities.\nPlease contact your local support team for application upgrade.",
"product_ids": [
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"56",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 ATS4G application include fixes for these vulnerabilities and are available for download",
"product_ids": [
"93"
],
"url": "https://www.se.com/ww/en/download/document/APC_ATS4G_704_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 of these cooling applications include fixes for these vulnerabilities and have been released.\nPlease contact your local support team for upgrades.",
"product_ids": [
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 NB250 application includes fixes for these vulnerabilities and has been released",
"product_ids": [
"95"
],
"url": "https://www.se.com/ww/en/download/document/APC_NB250_706_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 BM4 application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for BM4 application upgrade.",
"product_ids": [
"97"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 MDC application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for MDC application upgrade.",
"product_ids": [
"100"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"3",
"5",
"7",
"9",
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25",
"27",
"29",
"31",
"33",
"39",
"35",
"37",
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91",
"93",
"95",
"97",
"99",
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
]
}
],
"title": "CVE-2021-22814"
},
{
"acknowledgments": [
{
"names": [
"Chua Wei Kiat",
"Thanh Nguyen"
],
"organization": "Fortinet\u2019s Fortiguard Labs"
}
],
"cve": "CVE-2021-22815",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "description",
"text": "A CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027) vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"2",
"4",
"6",
"8",
"10",
"12",
"14",
"16",
"18",
"20",
"22",
"24",
"26",
"28",
"30",
"32",
"34",
"36",
"38",
"40",
"42",
"44",
"46",
"48",
"50",
"52",
"54",
"56",
"58",
"60",
"62",
"64",
"66",
"68",
"70",
"72",
"74",
"76",
"78",
"80",
"82",
"84",
"86",
"88",
"90",
"92",
"94",
"96",
"98",
"100",
"102",
"104",
"106",
"108",
"110",
"112",
"114",
"116",
"118",
"120",
"122",
"124",
"126",
"128",
"130"
],
"known_affected": [
"1",
"3",
"5",
"7",
"9",
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25",
"27",
"29",
"31",
"33",
"39",
"35",
"37",
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91",
"93",
"95",
"97",
"99",
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"1"
],
"url": "https://www.apc.com/in/en/product/SFSUMX704/ups-network-management-card-v7-0-4-firmware-for-smartups-galaxy-3500-with-ap9630-31-35/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"3",
"5"
],
"url": "https://download.schneider-electric.com/files?p_File_Name=990-3403Z-EN.pdf\u0026p_Doc_Ref=SPD_ARAJ-9TN74X_EN\u0026p_enDocType=User+guide"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ",
"product_ids": [
"1",
"2",
"5"
],
"url": "https://www.apc.com/in/en/product/SFSY704/ups-network-management-card-v7-0-4-firmware-for-symmetra-1phase-with-ap9630-31-35/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 SYPX application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for SYPX application upgrade.",
"product_ids": [
"7",
"9"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later for the Symmetra PX 48/96/100/160 kW UPS (PX2), Symmetra PX 20/40 kW UPS (SY3P), Gutor (SXW, GVX), and Galaxy (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) includes fixes for these vulnerabilities has been released.\nPlease contact your local support team for application upgrades for these models.",
"product_ids": [
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"27",
"31"
],
"url": "https://www.se.com/ww/en/download/document/APC_NMC3_SU_1511_EN/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"29"
],
"url": "https://www.se.com/ww/en/download/document/APC_NMC3_SY_1511_EN/"
},
{
"category": "vendor_fix",
"details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download",
"product_ids": [
"27",
"29",
"31"
],
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-SURELNOTE_EN\u0026p_enDocType=User+guide\u0026p_File_Name=990-6322E-EN.pdf"
},
{
"category": "vendor_fix",
"details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"33"
],
"url": "https://download.schneider-electric.com/files?p_enDocType=Firmware\u0026p_Doc_Ref=APC_RPDU2G_706_EN\u0026p_File_Name=apc_hw05_aos704_rpdu2g706_bootmon109.exe"
},
{
"category": "vendor_fix",
"details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"33"
],
"url": "https://sk.se.com/doc_info.aspx?DocRef=990-9958L_EN\u0026isdvd=False\u0026df=3\u0026gid=891285"
},
{
"category": "vendor_fix",
"details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download",
"product_ids": [
"35"
],
"url": "https://ckm-content.se.com/ckmContent/sfc/servlet.shepherd/document/download/0698V00000KscmiQAB"
},
{
"category": "vendor_fix",
"details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download",
"product_ids": [
"35"
],
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=990-6391_EN\u0026p_enDocType=User+guide\u0026p_File_Name=990-6391B.pdf"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 RPP application includes fixes for these vulnerabilities and is available for download",
"product_ids": [
"37",
"39"
],
"url": "https://www.se.com/uk/en/download/document/APC_RPP_704_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 for X84P, XPDU, XRDP, PMM, and XRDP2G applications includes fixes for these vulnerabilities.\nPlease contact your local support team for application upgrade.",
"product_ids": [
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"56",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 ATS4G application include fixes for these vulnerabilities and are available for download",
"product_ids": [
"93"
],
"url": "https://www.se.com/ww/en/download/document/APC_ATS4G_704_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 of these cooling applications include fixes for these vulnerabilities and have been released.\nPlease contact your local support team for upgrades.",
"product_ids": [
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 NB250 application includes fixes for these vulnerabilities and has been released",
"product_ids": [
"95"
],
"url": "https://www.se.com/ww/en/download/document/APC_NB250_706_EN/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 BM4 application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for BM4 application upgrade.",
"product_ids": [
"97"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
},
{
"category": "vendor_fix",
"details": "V7.0.4 or later of the NMC2 MDC application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for MDC application upgrade.",
"product_ids": [
"100"
],
"url": "https://www.apc.com/us/en/support/contact-us/"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"3",
"5",
"7",
"9",
"11",
"13",
"15",
"17",
"19",
"21",
"23",
"25",
"27",
"29",
"31",
"33",
"39",
"35",
"37",
"41",
"43",
"45",
"47",
"49",
"51",
"53",
"55",
"57",
"59",
"61",
"63",
"65",
"67",
"69",
"71",
"73",
"75",
"77",
"79",
"81",
"83",
"85",
"87",
"89",
"91",
"93",
"95",
"97",
"99",
"101",
"103",
"105",
"107",
"109",
"111",
"113",
"115",
"117",
"119",
"121",
"123",
"125",
"127",
"129"
]
}
],
"title": "CVE-2021-22815"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…