ZDI-23-638: Schneider Electric APC Easy UPS Online SNMPDBManager Use of Hard-Coded Credentials Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Schneider Electric APC Easy UPS Online. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

apc attackers code credentials easy electric escalation exploit hard hard-coded credentials local local privilege escalation low order privilege privileged privilege escalation privileges schneider schneider electric system target ups vulnerability zdi