{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "publisher": { "category": "vendor", "name": "Schneider Electric CPCERT", "namespace": "https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp", "contact_details": "cybersecurity@se.com" }, "title": "APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices", "tracking": { "current_release_date": "2022-05-10T00:00:00.00Z", "id": "SEVD-2021-313-03", "initial_release_date": "2021-11-09T06:30:00.000Z", "status": "final", "version": "2", "generator": { "date": "2022-05-10T00:00:00.00Z", "engine": { "version": "1.2", "name": "Schneider Electric CSAF Generator" } }, "revision_history": [ { "date": "2021-11-09T06:30:00.000Z", "number": "1", "summary": "Original Release" }, { "date": "2022-05-10T00:00:00.00Z", "number": "2", "summary": "Remediations added for remaining affected products: APC Power Distribution products, Cooling products, Environmental Monitoring products, and Battery Management products." } ] }, "references": [ { "summary": "APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices - SEVD-2021-313-03 CSAF Version", "url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-313-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=sevd-2021-313-03.json", "category": "self" }, { "summary": "APC by Schneider Electric Network Management Cards (NMC) and NMC Embedded Devices - SEVD-2021-313-03 PDF Version", "url": "https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-313-03_APC_NMC_Security_Notification_V2.0.pdf", "category": "self" }, { "summary": "Recommended Cybersecurity Best Practices", "url": "https://www.se.com/us/en/download/document/7EN52-0390/", "category": "external" } ], "lang": "en-US", "distribution": { "text": "Public", "tlp": { "label": "WHITE" } }, "notes": [ { "category": "general", "text": "We strongly recommend the following industry cybersecurity best practices.\n\nhttps://www.se.com/us/en/download/document/7EN52-0390/\n* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.\n* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.\n* Place all controllers in locked cabinets and never leave them in the “Program” mode.\n* Never connect programming software to any network other than the network intended for that device.\n* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.\n* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.\n* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.\n* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.\nFor more information refer to the Schneider Electric Recommended Cybersecurity Best Practices document. \n", "title": "General Security Recommendations" }, { "category": "general", "text": "This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.\nFor further information related to cybersecurity in Schneider Electric’s products, visit the company’s cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp", "title": "For More Information" }, { "category": "legal_disclaimer", "text": "THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS “NOTIFICATION”) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN “AS-IS” BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND. SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION", "title": "LEGAL DISCLAIMER" }, { "category": "general", "text": "At Schneider, we believe access to energy and digital is a basic human right. We empower all to do more with less, ensuring Life Is On everywhere, for everyone, at every moment.\n\nWe provide energy and automation digital solutions for efficiency and sustainability. We combine world-leading energy technologies, real-time automation, software and services into integrated solutions for Homes, Buildings, Data Centers, Infrastructure and Industries.\n\nWe are committed to unleash the infinite possibilities of an open, global, innovative community that is passionate with our Meaningful Purpose, Inclusive and Empowered values.\n\nwww.se.com ", "title": "About Schneider Electric" }, { "category": "summary", "text": "Schneider Electric is aware of multiple vulnerabilities in its products that use the Network Management Card 2 (NMC2), Network Management Card 3 (NMC3), and the NMC embedded devices.\nThe NMC2 and the NMC3 cards and embedded devices allow for secure monitoring and control of APC by Schneider Electric products.\nFailure to apply the mitigations provided below may risk potential data disclosure or cross-site scripting which could result in execution of malicious web code or loss of device functionality.", "title": "Overview" } ] }, "product_tree": { "branches": [ { "category": "vendor", "name": "Schneider Electric", "branches": [ { "category": "product_family", "name": "1-Phase Uninterruptible Power Supply (UPS) using NMC2", "branches": [ { "category": "product_name", "name": "Smart-UPS", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "product_version_range", "name": "<=6.9.8", "product": { "product_id": "1", "name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Smart-UPS Network Management Card 2 AOS version 6.9.8 and prior", "product_identification_helper": { "model_numbers": [ "AP9630CH", "AP9630J", "AP9630", "AP9631", "AP9631CH", "AP9631J", "AP9635", "AP963J" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "2", "name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Smart-UPS Network Management Card 2 AOS version 7.0.4 and later" } } ] } ] }, { "category": "product_name", "name": "Symmetra", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "product_version_range", "name": "<=6.9.8", "product": { "product_id": "3", "name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra Network Management Card 2 AOS version 6.9.8 and prior", "product_identification_helper": { "model_numbers": [ "AP9630CH", "AP9630J", "AP9630", "AP9631", "AP9631CH", "AP9631J", "AP9635", "AP963J" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "4", "name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra Network Management Card 2 AOS version 7.0.4 and later" } } ] } ] }, { "category": "product_name", "name": "Galaxy 3500", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "product_version_range", "name": "<=6.9.8", "product": { "product_id": "5", "name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Galaxy 3500 Network Management Card 2 AOS version 6.9.8 and prior", "product_identification_helper": { "model_numbers": [ "AP9630CH", "AP9630J", "AP9630", "AP9631", "AP9631CH", "AP9631J", "AP9635", "AP963J" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "6", "name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Galaxy 3500 Network Management Card 2 AOS version 7.0.4 and later" } } ] } ] } ] }, { "category": "product_family", "name": "3-Phase Uninterruptible Power Supply (UPS) using NMC2", "branches": [ { "category": "product_name", "name": "Symmetra PX 250 (SYPX)", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "7", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 250 (SYPX) Network Management Card 2 AOS version 6.9.6 and prior", "product_identification_helper": { "model_numbers": [ "AP9630CH", "AP9630J", "AP9630", "AP9631", "AP9631CH", "AP9631J", "AP9635", "AP963J" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "8", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 250 (SYPX) Network Management Card 2 AOS version 7.0.4 and later" } } ] } ] }, { "category": "product_name", "name": "Symmetra PX 500 (SYPX)", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "9", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 500 (SYPX) Network Management Card 2 AOS version 6.9.6 and prior", "product_identification_helper": { "model_numbers": [ "AP9630CH", "AP9630J", "AP9630", "AP9631", "AP9631CH", "AP9631J", "AP9635", "AP963J" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "10", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 500 (SYPX) Network Management Card 2 AOS version 7.0.4 and later" } } ] } ] } ] }, { "category": "product_family", "name": "3-Phase Uninterruptible Power Supply (UPS) using NMC2", "branches": [ { "category": "product_name", "name": "Symmetra PX 48 kW UPS (PX2)", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "11", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 48 kW UPS (PX2) Network Management Card 2 AOS version 6.9.6 and prior", "product_identification_helper": { "model_numbers": [ "AP9630CH", "AP9630J", "AP9630", "AP9631", "AP9631CH", "AP9631J", "AP9635", "AP963J" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "12", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 48 kW UPS (PX2) Network Management Card 2 AOS version 7.0.4 and later" } } ] } ] }, { "category": "product_name", "name": "Symmetra PX 96 kW UPS (PX2)", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "13", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 96 kW UPS (PX2) Network Management Card 2 AOS version 6.9.6 and prior", "product_identification_helper": { "model_numbers": [ "AP9630CH", "AP9630J", "AP9630", "AP9631", "AP9631CH", "AP9631J", "AP9635", "AP963J" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "14", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 96 kW UPS (PX2) Network Management Card 2 AOS version 7.0.4 and later" } } ] } ] }, { "category": "product_name", "name": "Symmetra PX 100 kW UPS (PX2)", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "15", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 100 kW UPS (PX2) Network Management Card 2 AOS version 6.9.6 and prior", "product_identification_helper": { "model_numbers": [ "AP9630CH", "AP9630J", "AP9630", "AP9631", "AP9631CH", "AP9631J", "AP9635", "AP963J" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "16", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 100 kW UPS (PX2) Network Management Card 2 AOS version 7.0.4 and later" } } ] } ] }, { "category": "product_name", "name": "Symmetra PX 160 kW UPS (PX2)", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "17", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 160 kW UPS (PX2) Network Management Card 2 AOS version 6.9.6 and prior", "product_identification_helper": { "model_numbers": [ "AP9630CH", "AP9630J", "AP9630", "AP9631", "AP9631CH", "AP9631J", "AP9635", "AP963J" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "18", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 160 kW UPS (PX2) Network Management Card 2 AOS version 7.0.4 and later" } } ] } ] }, { "category": "product_name", "name": "Symmetra PX 20 kW UPS (SY3P)", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "19", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 20 kW UPS (SY3P) Network Management Card 2 AOS version 6.9.6 and prior", "product_identification_helper": { "model_numbers": [ "AP9630CH", "AP9630J", "AP9630", "AP9631", "AP9631CH", "AP9631J", "AP9635", "AP963J" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "20", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 20 kW UPS (SY3P) Network Management Card 2 AOS version 7.0.4 and later" } } ] } ] }, { "category": "product_name", "name": "Symmetra PX 40 kW UPS (SY3P)", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "21", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 40 kW UPS (SY3P) Network Management Card 2 AOS version 6.9.6 and prior", "product_identification_helper": { "model_numbers": [ "AP9630CH", "AP9630J", "AP9630", "AP9631", "AP9631CH", "AP9631J", "AP9635", "AP963J" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "22", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Symmetra PX 40 kW UPS (SY3P) Network Management Card 2 AOS version 7.0.4 and later" } } ] } ] }, { "category": "product_name", "name": "Gutor (SXW, GVX)", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "23", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Gutor (SXW, GVX) Network Management Card 2 AOS version 6.9.6 and prior", "product_identification_helper": { "model_numbers": [ "AP9630CH", "AP9630J", "AP9630", "AP9631", "AP9631CH", "AP9631J", "AP9635", "AP963J" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "24", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Gutor (SXW, GVX) Network Management Card 2 AOS version 7.0.4 and later" } } ] } ] }, { "category": "product_name", "name": "Galaxy 3500 (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU)", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "25", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Galaxy 3500 (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) Network Management Card 2 AOS version 6.9.6 and prior", "product_identification_helper": { "model_numbers": [ "AP9630CH", "AP9630J", "AP9630", "AP9631", "AP9631CH", "AP9631J", "AP9635", "AP963J" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "26", "name": "Schneider Electric 3-Phase Uninterruptible Power Supply (UPS) using NMC2 Galaxy 3500 (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) Network Management Card 2 AOS version 7.0.4 and later" } } ] } ] } ] }, { "category": "product_family", "name": "1-Phase Uninterruptible Power Supply (UPS) using NMC3", "branches": [ { "category": "product_name", "name": "Smart-UPS", "branches": [ { "category": "host_name", "name": "Network Management Card 3 AOS", "branches": [ { "category": "product_version_range", "name": "<=1.4.2.1", "product": { "product_id": "27", "name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Smart-UPS Network Management Card 3 AOS version 1.4.2.1 and prior", "product_identification_helper": { "model_numbers": [ "AP9640", "AP9640J", "AP9641", "AP9641J", "AP9643", "AP9643J" ] } } }, { "category": "product_version_range", "name": ">=1.5", "product": { "product_id": "28", "name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Smart-UPS Network Management Card 3 AOS version 1.5 and later" } } ] } ] }, { "category": "product_name", "name": "Symmetra", "branches": [ { "category": "host_name", "name": "Network Management Card 3 AOS", "branches": [ { "category": "product_version_range", "name": "<=1.4.2.1", "product": { "product_id": "29", "name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Symmetra Network Management Card 3 AOS version 1.4.2.1 and prior", "product_identification_helper": { "model_numbers": [ "AP9640", "AP9640J", "AP9641", "AP9641J", "AP9643", "AP9643J" ] } } }, { "category": "product_version_range", "name": ">=1.5", "product": { "product_id": "30", "name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Symmetra Network Management Card 3 AOS version 1.5 and later" } } ] } ] }, { "category": "product_name", "name": "Galaxy 3500", "branches": [ { "category": "host_name", "name": "Network Management Card 2 AOS", "branches": [ { "category": "host_name", "name": "Network Management Card 3 AOS", "branches": [ { "category": "product_version_range", "name": "<=1.4.2.1", "product": { "product_id": "31", "name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Galaxy 3500 Network Management Card 2 AOS Network Management Card 3 AOS version 1.4.2.1 and prior", "product_identification_helper": { "model_numbers": [ "AP9640", "AP9640J", "AP9641", "AP9641J", "AP9643", "AP9643J" ] } } }, { "category": "product_version_range", "name": ">=1.5", "product": { "product_id": "32", "name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC3 Galaxy 3500 Network Management Card 2 AOS Network Management Card 3 AOS version 1.5 and later" } } ] } ] } ] } ] }, { "category": "product_family", "name": "APC Rack Power Distribution Units (PDU) using NMC2", "branches": [ { "category": "product_name", "name": "2G Metered/Switched Rack PDUs with embedded NMC2", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "33", "name": "Schneider Electric APC Rack Power Distribution Units (PDU) using NMC2 2G Metered/Switched Rack PDUs with embedded NMC2 Network Management Card AOS 2 version 6.9.6 and prior", "product_identification_helper": { "model_numbers": [ "AP84xx", "AP86xx", "AP88xx", "AP89xx" ] } } }, { "category": "product_version_range", "name": ">=7.0.6", "product": { "product_id": "34", "name": "Schneider Electric APC Rack Power Distribution Units (PDU) using NMC2 2G Metered/Switched Rack PDUs with embedded NMC2 Network Management Card AOS 2 version 7.0.6 and later" } } ] } ] } ] }, { "category": "product_family", "name": "APC Rack Power Distribution Units (PDU) using NMC3", "branches": [ { "category": "product_name", "name": "2G Metered/Switched Rack PDUs with embedded NMC3", "branches": [ { "category": "host_name", "name": "Network Management Card 3 AOS", "branches": [ { "category": "product_version_range", "name": "<=1.4.0", "product": { "product_id": "35", "name": "Schneider Electric APC Rack Power Distribution Units (PDU) using NMC3 2G Metered/Switched Rack PDUs with embedded NMC3 Network Management Card 3 AOS version 1.4.0 and prior", "product_identification_helper": { "model_numbers": [ "APDU99xx" ] } } }, { "category": "product_version", "name": "1.5.0", "product": { "product_id": "36", "name": "Schneider Electric APC Rack Power Distribution Units (PDU) using NMC3 2G Metered/Switched Rack PDUs with embedded NMC3 Network Management Card 3 AOS 1.5.0" } } ] } ] } ] }, { "category": "product_family", "name": "APC 3-Phase Power Distribution Products using NMC2", "branches": [ { "category": "product_name", "name": "Galaxy RPP", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "37", "name": "Schneider Electric APC 3-Phase Power Distribution Products using NMC2 Galaxy RPP Network Management Card AOS 2 version 6.9.6 and prior" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "38", "name": "Schneider Electric APC 3-Phase Power Distribution Products using NMC2 Galaxy RPP Network Management Card AOS 2 version 7.0.4 and later" } } ] } ] }, { "category": "product_name", "name": "GRPPIP2X84", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "39", "name": "Schneider Electric APC 3-Phase Power Distribution Products using NMC2 GRPPIP2X84 Network Management Card AOS 2 version 6.9.6 and prior" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "40", "name": "Schneider Electric APC 3-Phase Power Distribution Products using NMC2 GRPPIP2X84 Network Management Card AOS 2 version 7.0.4 and later" } } ] } ] } ] }, { "category": "product_family", "name": "Network Management Card 2 (NMC2) for InfraStruxure 150 kVA PDU with 84 Poles (X84P)", "branches": [ { "category": "product_name", "name": "PDPB150G6F", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "41", "name": "Schneider Electric Network Management Card 2 (NMC2) for InfraStruxure 150 kVA PDU with 84 Poles (X84P) PDPB150G6F Network Management Card AOS 2 version 6.9.6 and prior" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "42", "name": "Schneider Electric Network Management Card 2 (NMC2) for InfraStruxure 150 kVA PDU with 84 Poles (X84P) PDPB150G6F Network Management Card AOS 2 >=7.0.4" } } ] } ] } ] }, { "category": "product_family", "name": "Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU)", "branches": [ { "category": "product_name", "name": "PD40G6FK1-M", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "43", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40G6FK1-M Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "44", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40G6FK1-M Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PD40F6FK1-M", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "45", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40F6FK1-M Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "46", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40F6FK1-M Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PD40L6FK1-M", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "47", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40L6FK1-M Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "48", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40L6FK1-M Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PDRPPNX10M", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "49", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PDRPPNX10M Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "50", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PDRPPNX10M Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PD60G6FK1", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "51", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60G6FK1 Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "52", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60G6FK1 Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PD60F6FK1", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "53", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60F6FK1 Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "54", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60F6FK1 Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PDRPPNX10", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "55", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PDRPPNX10 Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "56", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PDRPPNX10 Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PD40E5EK20-M", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "57", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40E5EK20-M Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "58", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40E5EK20-M Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PD40H5EK20-M", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "59", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40H5EK20-M Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "60", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD40H5EK20-M Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PD60L6FK1", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "61", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60L6FK1 Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "62", "name": "Schneider Electric Network Management Card 2 for InfraStruxure 40/60kVA PDU (XPDU) PD60L6FK1 Network Management Card AOS 2 >=7.0.4" } } ] } ] } ] }, { "category": "product_family", "name": "Network Management Card 2 for Modular 150/175kVA PDU (XRDP)", "branches": [ { "category": "product_name", "name": "PDPM150G6F", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "63", "name": "Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM150G6F Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "64", "name": "Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM150G6F Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PDPM150L6F", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "65", "name": "Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM150L6F Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "66", "name": "Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM150L6F Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PDPM175G6H", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "67", "name": "Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM175G6H Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "68", "name": "Schneider Electric Network Management Card 2 for Modular 150/175kVA PDU (XRDP) PDPM175G6H Network Management Card AOS 2 >=7.0.4" } } ] } ] } ] }, { "category": "product_family", "name": "Network Management Card 2 for 400 and 500 kVA (PMM)", "branches": [ { "category": "product_name", "name": "PMM400-ALA", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "69", "name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-ALA Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "70", "name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-ALA Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PMM400-ALAX", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "71", "name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-ALAX Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "72", "name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-ALAX Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PMM400-CUB", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "73", "name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-CUB Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "74", "name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM400-CUB Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PMM500-ALA", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "75", "name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-ALA Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "76", "name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-ALA Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PMM500-ALAX", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "77", "name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-ALAX Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "78", "name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-ALAX Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PMM500-CUB", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "79", "name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-CUB Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "80", "name": "Schneider Electric Network Management Card 2 for 400 and 500 kVA (PMM) PMM500-CUB Network Management Card AOS 2 >=7.0.4" } } ] } ] } ] }, { "category": "product_family", "name": "Network Management Card 2 for Modular PDU (XRDP2G)", "branches": [ { "category": "product_name", "name": "PDPM72F-5U", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "81", "name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM72F-5U Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "82", "name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM72F-5U Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PDPM138H-5U", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "83", "name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM138H-5U Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "84", "name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM138H-5U Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PDPM144F", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "85", "name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM144F Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "86", "name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM144F Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PDPM138H-R", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "87", "name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM138H-R Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "88", "name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM138H-R Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PDPM277H", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "89", "name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM277H Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "90", "name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM277H Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "PDPM288G6H", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "91", "name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM288G6H Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "92", "name": "Schneider Electric Network Management Card 2 for Modular PDU (XRDP2G) PDPM288G6H Network Management Card AOS 2 >=7.0.4" } } ] } ] } ] }, { "category": "product_family", "name": "Rack Automatic Transfer Switches (ATS) Embedded NMC2", "branches": [ { "category": "product_name", "name": "Rack Automatic Transfer Switches", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2 (ATS4G)", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "93", "name": "Schneider Electric Rack Automatic Transfer Switches (ATS) Embedded NMC2 Rack Automatic Transfer Switches Network Management Card AOS 2 (ATS4G) <=6.9.6", "product_identification_helper": { "model_numbers": [ "AP44xx" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "94", "name": "Schneider Electric Rack Automatic Transfer Switches (ATS) Embedded NMC2 Rack Automatic Transfer Switches Network Management Card AOS 2 (ATS4G) >=7.0.4" } } ] } ] } ] }, { "category": "product_family", "name": "Environmental Monitoring Unit with embedded NMC2 (NB250)", "branches": [ { "category": "product_name", "name": "NetBotz NBRK0250", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "95", "name": "Schneider Electric Environmental Monitoring Unit with embedded NMC2 (NB250) NetBotz NBRK0250 Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "96", "name": "Schneider Electric Environmental Monitoring Unit with embedded NMC2 (NB250) NetBotz NBRK0250 Network Management Card AOS 2 >=7.0.4" } } ] } ] } ] }, { "category": "product_family", "name": "Battery Management Products Network Management Card 2 (NMC2)", "branches": [ { "category": "product_name", "name": "AP9922 Battery Management System (BM4)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "97", "name": "Schneider Electric Battery Management Products Network Management Card 2 (NMC2) AP9922 Battery Management System (BM4) Network Management Card AOS 2 <=6.9.6", "product_identification_helper": { "model_numbers": [ "BM4" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "98", "name": "Schneider Electric Battery Management Products Network Management Card 2 (NMC2) AP9922 Battery Management System (BM4) Network Management Card AOS 2 >=7.0.4" } } ] } ] } ] }, { "category": "product_family", "name": "Battery Management Products", "branches": [ { "category": "product_name", "name": "EcoStruxure Micro Data Center (MDC)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2 (ATS4G)", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "99", "name": "Schneider Electric 1-Phase Uninterruptible Power Supply (UPS) using NMC2 Smart-UPS Network Management Card 2 AOS <=6.9.8", "product_identification_helper": { "model_numbers": [ "MDC" ] } } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "100", "name": "Schneider Electric Battery Management Products EcoStruxure Micro Data Center (MDC) Network Management Card AOS 2 (ATS4G) >=7.0.4" } } ] } ] } ] }, { "category": "product_family", "name": "Network Management Card 2 (NMC2) Cooling Products", "branches": [ { "category": "product_name", "name": "InRow Cooling for series ACRP5xx, ACRP1xx, ACRD5xx, and ACRC5xx SKUs (ACRP2G)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "101", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRP5xx, ACRP1xx, ACRD5xx, and ACRC5xx SKUs (ACRP2G) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "102", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRP5xx, ACRP1xx, ACRD5xx, and ACRC5xx SKUs (ACRP2G) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "InRow Cooling for series ACRC10x SKUs (RC10X2G)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "103", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRC10x SKUs (RC10X2G) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "104", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRC10x SKUs (RC10X2G) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "InRow Cooling for series ACRD6xx and ACRC6xx SKUs (ACRD2G)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "105", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRD6xx and ACRC6xx SKUs (ACRD2G) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "106", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRD6xx and ACRC6xx SKUs (ACRD2G) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "InRow Cooling Display for series ACRD3xx (ACRC2G)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "107", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling Display for series ACRD3xx (ACRC2G) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "108", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling Display for series ACRD3xx (ACRC2G) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "InRow Cooling for series ACSC1xx SKUs (SC2G)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "109", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACSC1xx SKUs (SC2G) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "110", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACSC1xx SKUs (SC2G) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "InRow Cooling for series ACRD1xx and ACRD2xx (ACRPTK2G)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "111", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRD1xx and ACRD2xx (ACRPTK2G) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "112", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products InRow Cooling for series ACRD1xx and ACRD2xx (ACRPTK2G) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "Ecoflair IAEC25/50 Air Economizer Display (EB2G)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "113", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Ecoflair IAEC25/50 Air Economizer Display (EB2G) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "114", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Ecoflair IAEC25/50 Air Economizer Display (EB2G) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "Uniflair SP UCF0481I, UCF0341I (UNFLRSP)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "115", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair SP UCF0481I, UCF0341I (UNFLRSP) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "116", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair SP UCF0481I, UCF0341I (UNFLRSP) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "Uniflair AM Perimeter Cooling for SKUs: SDCC, SDCV, SDAC, ADAV, SDWC, SDWV, SUAC, SUAV, SUWC, and SUWV (AMICO)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "117", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair AM Perimeter Cooling for SKUs: SDCC, SDCV, SDAC, ADAV, SDWC, SDWV, SUAC, SUAV, SUWC, and SUWV (AMICO) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "118", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair AM Perimeter Cooling for SKUs: SDCC, SDCV, SDAC, ADAV, SDWC, SDWV, SUAC, SUAV, SUWC, and SUWV (AMICO) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "Uniflair LE DX Perimeter Cooling Display for SKUs: IDAV, IDEV, IDWV, IUAV, IUEV, IUWV, IXAV, IXEV, IXWV, LDAV, LDEV, and LDWV (LEDX2G)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "119", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair LE DX Perimeter Cooling Display for SKUs: IDAV, IDEV, IDWV, IUAV, IUEV, IUWV, IXAV, IXEV, IXWV, LDAV, LDEV, and LDWV (LEDX2G) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "120", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair LE DX Perimeter Cooling Display for SKUs: IDAV, IDEV, IDWV, IUAV, IUEV, IUWV, IXAV, IXEV, IXWV, LDAV, LDEV, and LDWV (LEDX2G) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "Uniflair LEL Perimeter Cooling for SKUs: LDCV, LUCV (UNFLRLEL)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "121", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair LEL Perimeter Cooling for SKUs: LDCV, LUCV (UNFLRLEL) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "122", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair LEL Perimeter Cooling for SKUs: LDCV, LUCV (UNFLRLEL) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "Uniflair Display for Aquaflair TSA/TRA Chiller (UNFLRTSA)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "123", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair Display for Aquaflair TSA/TRA Chiller (UNFLRTSA) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "124", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair Display for Aquaflair TSA/TRA Chiller (UNFLRTSA) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "Uniflair Display for Trim Chiller (TRMCHLR)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "125", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair Display for Trim Chiller (TRMCHLR) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "126", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair Display for Trim Chiller (TRMCHLR) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "Uniflair BCWC Chiller (AQUACENTR)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "127", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair BCWC Chiller (AQUACENTR) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "128", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Uniflair BCWC Chiller (AQUACENTR) Network Management Card AOS 2 >=7.0.4" } } ] } ] }, { "category": "product_name", "name": "Refrigerant Distribution Unit: ACDA9xx (RDU)", "branches": [ { "category": "host_name", "name": "Network Management Card AOS 2", "branches": [ { "category": "product_version_range", "name": "<=6.9.6", "product": { "product_id": "129", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Refrigerant Distribution Unit: ACDA9xx (RDU) Network Management Card AOS 2 <=6.9.6" } }, { "category": "product_version_range", "name": ">=7.0.4", "product": { "product_id": "130", "name": "Schneider Electric Network Management Card 2 (NMC2) Cooling Products Refrigerant Distribution Unit: ACDA9xx (RDU) Network Management Card AOS 2 >=7.0.4" } } ] } ] } ] } ] } ] }, "vulnerabilities": [ { "title": "CVE-2021-22810", "notes": [ { "category": "description", "text": "A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file.", "title": "CVE Description" } ], "cve": "CVE-2021-22810", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "product_status": { "known_affected": [ "1", "3", "5", "7", "9", "11", "13", "15", "17", "19", "21", "23", "25", "27", "29", "31", "33", "39", "35", "37", "41", "43", "45", "47", "49", "51", "53", "55", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91", "93", "95", "97", "99", "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "fixed": [ "2", "4", "6", "8", "10", "12", "14", "16", "18", "20", "22", "24", "26", "28", "30", "32", "34", "36", "38", "40", "42", "44", "46", "48", "50", "52", "54", "56", "58", "60", "62", "64", "66", "68", "70", "72", "74", "76", "78", "80", "82", "84", "86", "88", "90", "92", "94", "96", "98", "100", "102", "104", "106", "108", "110", "112", "114", "116", "118", "120", "122", "124", "126", "128", "130" ] }, "scores": [ { "products": [ "1", "3", "5", "7", "9", "11", "13", "15", "17", "19", "21", "23", "25", "27", "29", "31", "33", "39", "35", "37", "41", "43", "45", "47", "49", "51", "53", "55", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91", "93", "95", "97", "99", "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } } ], "remediations": [ { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "1" ], "url": "https://www.apc.com/in/en/product/SFSUMX704/ups-network-management-card-v7-0-4-firmware-for-smartups-galaxy-3500-with-ap9630-31-35/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "3","5" ], "url": "https://download.schneider-electric.com/files?p_File_Name=990-3403Z-EN.pdf&p_Doc_Ref=SPD_ARAJ-9TN74X_EN&p_enDocType=User+guide" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "1","2", "5" ], "url": "https://www.apc.com/in/en/product/SFSY704/ups-network-management-card-v7-0-4-firmware-for-symmetra-1phase-with-ap9630-31-35/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SYPX application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for SYPX application upgrade.", "product_ids": [ "7", "9" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later for the Symmetra PX 48/96/100/160 kW UPS (PX2), Symmetra PX 20/40 kW UPS (SY3P), Gutor (SXW, GVX), and Galaxy (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) includes fixes for these vulnerabilities has been released.\nPlease contact your local support team for application upgrades for these models.", "product_ids": [ "11", "13", "15", "17", "19", "21", "23", "25" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "27", "31" ], "url":"https://www.se.com/ww/en/download/document/APC_NMC3_SU_1511_EN/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "29" ], "url":"https://www.se.com/ww/en/download/document/APC_NMC3_SY_1511_EN/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "27", "29", "31" ], "url":"https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-SURELNOTE_EN&p_enDocType=User+guide&p_File_Name=990-6322E-EN.pdf" }, { "category": "vendor_fix", "details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "33" ], "url":"https://download.schneider-electric.com/files?p_enDocType=Firmware&p_Doc_Ref=APC_RPDU2G_706_EN&p_File_Name=apc_hw05_aos704_rpdu2g706_bootmon109.exe" }, { "category": "vendor_fix", "details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "33" ], "url":"https://sk.se.com/doc_info.aspx?DocRef=990-9958L_EN&isdvd=False&df=3&gid=891285" }, { "category": "vendor_fix", "details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download", "product_ids": [ "35" ], "url":"https://ckm-content.se.com/ckmContent/sfc/servlet.shepherd/document/download/0698V00000KscmiQAB" }, { "category": "vendor_fix", "details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download", "product_ids": [ "35" ], "url":"https://download.schneider-electric.com/files?p_Doc_Ref=990-6391_EN&p_enDocType=User+guide&p_File_Name=990-6391B.pdf" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 RPP application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "37", "39" ], "url":"https://www.se.com/uk/en/download/document/APC_RPP_704_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 for X84P, XPDU, XRDP, PMM, and XRDP2G applications includes fixes for these vulnerabilities.\nPlease contact your local support team for application upgrade.", "product_ids": [ "41", "43", "45", "47", "49", "51", "53", "55", "56", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 ATS4G application include fixes for these vulnerabilities and are available for download", "product_ids": [ "93" ], "url":"https://www.se.com/ww/en/download/document/APC_ATS4G_704_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 of these cooling applications include fixes for these vulnerabilities and have been released.\nPlease contact your local support team for upgrades.", "product_ids": [ "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 NB250 application includes fixes for these vulnerabilities and has been released", "product_ids": [ "95" ] , "url":"https://www.se.com/ww/en/download/document/APC_NB250_706_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 BM4 application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for BM4 application upgrade.", "product_ids": [ "97" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 MDC application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for MDC application upgrade.", "product_ids": [ "100" ], "url":"https://www.apc.com/us/en/support/contact-us/" } ], "acknowledgments": [ { "names": [ "Chua Wei Kiat", "Thanh Nguyen" ], "organization": "Fortinet’s Fortiguard Labs" } ] }, { "title": "CVE-2021-22811", "notes": [ { "category": "description", "text": "A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause script execution when the request of a privileged account accessing the vulnerable web page is intercepted.", "title": "CVE Description" } ], "cve": "CVE-2021-22811", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "product_status": { "known_affected": [ "1", "3", "5", "7", "9", "11", "13", "15", "17", "19", "21", "23", "25", "27", "29", "31", "33", "39", "35", "37", "41", "43", "45", "47", "49", "51", "53", "55", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91", "93", "95", "97", "99", "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "fixed": [ "2", "4", "6", "8", "10", "12", "14", "16", "18", "20", "22", "24", "26", "28", "30", "32", "34", "36", "38", "40", "42", "44", "46", "48", "50", "52", "54", "56", "58", "60", "62", "64", "66", "68", "70", "72", "74", "76", "78", "80", "82", "84", "86", "88", "90", "92", "94", "96", "98", "100", "102", "104", "106", "108", "110", "112", "114", "116", "118", "120", "122", "124", "126", "128", "130" ] }, "scores": [ { "products": [ "1", "3", "5", "7", "9", "11", "13", "15", "17", "19", "21", "23", "25", "27", "29", "31", "33", "39", "35", "37", "41", "43", "45", "47", "49", "51", "53", "55", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91", "93", "95", "97", "99", "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } } ], "remediations": [ { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "1" ], "url": "https://www.apc.com/in/en/product/SFSUMX704/ups-network-management-card-v7-0-4-firmware-for-smartups-galaxy-3500-with-ap9630-31-35/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "3","5" ], "url": "https://download.schneider-electric.com/files?p_File_Name=990-3403Z-EN.pdf&p_Doc_Ref=SPD_ARAJ-9TN74X_EN&p_enDocType=User+guide" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "1","2", "5" ], "url": "https://www.apc.com/in/en/product/SFSY704/ups-network-management-card-v7-0-4-firmware-for-symmetra-1phase-with-ap9630-31-35/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SYPX application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for SYPX application upgrade.", "product_ids": [ "7", "9" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later for the Symmetra PX 48/96/100/160 kW UPS (PX2), Symmetra PX 20/40 kW UPS (SY3P), Gutor (SXW, GVX), and Galaxy (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) includes fixes for these vulnerabilities has been released.\nPlease contact your local support team for application upgrades for these models.", "product_ids": [ "11", "13", "15", "17", "19", "21", "23", "25" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "27", "31" ], "url":"https://www.se.com/ww/en/download/document/APC_NMC3_SU_1511_EN/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "29" ], "url":"https://www.se.com/ww/en/download/document/APC_NMC3_SY_1511_EN/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "27", "29", "31" ], "url":"https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-SURELNOTE_EN&p_enDocType=User+guide&p_File_Name=990-6322E-EN.pdf" }, { "category": "vendor_fix", "details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "33" ], "url":"https://download.schneider-electric.com/files?p_enDocType=Firmware&p_Doc_Ref=APC_RPDU2G_706_EN&p_File_Name=apc_hw05_aos704_rpdu2g706_bootmon109.exe" }, { "category": "vendor_fix", "details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "33" ], "url":"https://sk.se.com/doc_info.aspx?DocRef=990-9958L_EN&isdvd=False&df=3&gid=891285" }, { "category": "vendor_fix", "details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download", "product_ids": [ "35" ], "url":"https://ckm-content.se.com/ckmContent/sfc/servlet.shepherd/document/download/0698V00000KscmiQAB" }, { "category": "vendor_fix", "details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download", "product_ids": [ "35" ], "url":"https://download.schneider-electric.com/files?p_Doc_Ref=990-6391_EN&p_enDocType=User+guide&p_File_Name=990-6391B.pdf" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 RPP application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "37", "39" ], "url":"https://www.se.com/uk/en/download/document/APC_RPP_704_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 for X84P, XPDU, XRDP, PMM, and XRDP2G applications includes fixes for these vulnerabilities.\nPlease contact your local support team for application upgrade.", "product_ids": [ "41", "43", "45", "47", "49", "51", "53", "55", "56", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 ATS4G application include fixes for these vulnerabilities and are available for download", "product_ids": [ "93" ], "url":"https://www.se.com/ww/en/download/document/APC_ATS4G_704_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 of these cooling applications include fixes for these vulnerabilities and have been released.\nPlease contact your local support team for upgrades.", "product_ids": [ "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 NB250 application includes fixes for these vulnerabilities and has been released", "product_ids": [ "95" ] , "url":"https://www.se.com/ww/en/download/document/APC_NB250_706_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 BM4 application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for BM4 application upgrade.", "product_ids": [ "97" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 MDC application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for MDC application upgrade.", "product_ids": [ "100" ], "url":"https://www.apc.com/us/en/support/contact-us/" } ], "acknowledgments": [ { "names": [ "Chua Wei Kiat", "Thanh Nguyen" ], "organization": "Fortinet’s Fortiguard Labs" } ] }, { "title": "CVE-2021-22812", "notes": [ { "category": "description", "text": "A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file.", "title": "CVE Description" } ], "cve": "CVE-2021-22812", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "product_status": { "known_affected": [ "1", "3", "5", "7", "9", "11", "13", "15", "17", "19", "21", "23", "25", "27", "29", "31", "33", "39", "35", "37", "41", "43", "45", "47", "49", "51", "53", "55", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91", "93", "95", "97", "99", "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "fixed": [ "2", "4", "6", "8", "10", "12", "14", "16", "18", "20", "22", "24", "26", "28", "30", "32", "34", "36", "38", "40", "42", "44", "46", "48", "50", "52", "54", "56", "58", "60", "62", "64", "66", "68", "70", "72", "74", "76", "78", "80", "82", "84", "86", "88", "90", "92", "94", "96", "98", "100", "102", "104", "106", "108", "110", "112", "114", "116", "118", "120", "122", "124", "126", "128", "130" ] }, "scores": [ { "products": [ "1", "3", "5", "7", "9", "11", "13", "15", "17", "19", "21", "23", "25", "27", "29", "31", "33", "39", "35", "37", "41", "43", "45", "47", "49", "51", "53", "55", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91", "93", "95", "97", "99", "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } } ], "remediations": [ { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "1" ], "url": "https://www.apc.com/in/en/product/SFSUMX704/ups-network-management-card-v7-0-4-firmware-for-smartups-galaxy-3500-with-ap9630-31-35/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "3","5" ], "url": "https://download.schneider-electric.com/files?p_File_Name=990-3403Z-EN.pdf&p_Doc_Ref=SPD_ARAJ-9TN74X_EN&p_enDocType=User+guide" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "1","2", "5" ], "url": "https://www.apc.com/in/en/product/SFSY704/ups-network-management-card-v7-0-4-firmware-for-symmetra-1phase-with-ap9630-31-35/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SYPX application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for SYPX application upgrade.", "product_ids": [ "7", "9" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later for the Symmetra PX 48/96/100/160 kW UPS (PX2), Symmetra PX 20/40 kW UPS (SY3P), Gutor (SXW, GVX), and Galaxy (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) includes fixes for these vulnerabilities has been released.\nPlease contact your local support team for application upgrades for these models.", "product_ids": [ "11", "13", "15", "17", "19", "21", "23", "25" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "27", "31" ], "url":"https://www.se.com/ww/en/download/document/APC_NMC3_SU_1511_EN/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "29" ], "url":"https://www.se.com/ww/en/download/document/APC_NMC3_SY_1511_EN/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "27", "29", "31" ], "url":"https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-SURELNOTE_EN&p_enDocType=User+guide&p_File_Name=990-6322E-EN.pdf" }, { "category": "vendor_fix", "details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "33" ], "url":"https://download.schneider-electric.com/files?p_enDocType=Firmware&p_Doc_Ref=APC_RPDU2G_706_EN&p_File_Name=apc_hw05_aos704_rpdu2g706_bootmon109.exe" }, { "category": "vendor_fix", "details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "33" ], "url":"https://sk.se.com/doc_info.aspx?DocRef=990-9958L_EN&isdvd=False&df=3&gid=891285" }, { "category": "vendor_fix", "details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download", "product_ids": [ "35" ], "url":"https://ckm-content.se.com/ckmContent/sfc/servlet.shepherd/document/download/0698V00000KscmiQAB" }, { "category": "vendor_fix", "details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download", "product_ids": [ "35" ], "url":"https://download.schneider-electric.com/files?p_Doc_Ref=990-6391_EN&p_enDocType=User+guide&p_File_Name=990-6391B.pdf" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 RPP application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "37", "39" ], "url":"https://www.se.com/uk/en/download/document/APC_RPP_704_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 for X84P, XPDU, XRDP, PMM, and XRDP2G applications includes fixes for these vulnerabilities.\nPlease contact your local support team for application upgrade.", "product_ids": [ "41", "43", "45", "47", "49", "51", "53", "55", "56", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 ATS4G application include fixes for these vulnerabilities and are available for download", "product_ids": [ "93" ], "url":"https://www.se.com/ww/en/download/document/APC_ATS4G_704_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 of these cooling applications include fixes for these vulnerabilities and have been released.\nPlease contact your local support team for upgrades.", "product_ids": [ "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 NB250 application includes fixes for these vulnerabilities and has been released", "product_ids": [ "95" ] , "url":"https://www.se.com/ww/en/download/document/APC_NB250_706_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 BM4 application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for BM4 application upgrade.", "product_ids": [ "97" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 MDC application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for MDC application upgrade.", "product_ids": [ "100" ], "url":"https://www.apc.com/us/en/support/contact-us/" } ], "acknowledgments": [ { "names": [ "Chua Wei Kiat", "Thanh Nguyen" ], "organization": "Fortinet’s Fortiguard Labs" } ] }, { "title": "CVE-2021-22813", "notes": [ { "category": "description", "text": "A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file.", "title": "CVE Description" } ], "cve": "CVE-2021-22813", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "product_status": { "known_affected": [ "1", "3", "5", "7", "9", "11", "13", "15", "17", "19", "21", "23", "25", "27", "29", "31", "33", "39", "35", "37", "41", "43", "45", "47", "49", "51", "53", "55", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91", "93", "95", "97", "99", "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "fixed": [ "2", "4", "6", "8", "10", "12", "14", "16", "18", "20", "22", "24", "26", "28", "30", "32", "34", "36", "38", "40", "42", "44", "46", "48", "50", "52", "54", "56", "58", "60", "62", "64", "66", "68", "70", "72", "74", "76", "78", "80", "82", "84", "86", "88", "90", "92", "94", "96", "98", "100", "102", "104", "106", "108", "110", "112", "114", "116", "118", "120", "122", "124", "126", "128", "130" ] }, "scores": [ { "products": [ "1", "3", "5", "7", "9", "11", "13", "15", "17", "19", "21", "23", "25", "27", "29", "31", "33", "39", "35", "37", "41", "43", "45", "47", "49", "51", "53", "55", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91", "93", "95", "97", "99", "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } } ], "remediations": [ { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "1" ], "url": "https://www.apc.com/in/en/product/SFSUMX704/ups-network-management-card-v7-0-4-firmware-for-smartups-galaxy-3500-with-ap9630-31-35/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "3","5" ], "url": "https://download.schneider-electric.com/files?p_File_Name=990-3403Z-EN.pdf&p_Doc_Ref=SPD_ARAJ-9TN74X_EN&p_enDocType=User+guide" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "1","2", "5" ], "url": "https://www.apc.com/in/en/product/SFSY704/ups-network-management-card-v7-0-4-firmware-for-symmetra-1phase-with-ap9630-31-35/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SYPX application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for SYPX application upgrade.", "product_ids": [ "7", "9" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later for the Symmetra PX 48/96/100/160 kW UPS (PX2), Symmetra PX 20/40 kW UPS (SY3P), Gutor (SXW, GVX), and Galaxy (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) includes fixes for these vulnerabilities has been released.\nPlease contact your local support team for application upgrades for these models.", "product_ids": [ "11", "13", "15", "17", "19", "21", "23", "25" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "27", "31" ], "url":"https://www.se.com/ww/en/download/document/APC_NMC3_SU_1511_EN/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "29" ], "url":"https://www.se.com/ww/en/download/document/APC_NMC3_SY_1511_EN/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "27", "29", "31" ], "url":"https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-SURELNOTE_EN&p_enDocType=User+guide&p_File_Name=990-6322E-EN.pdf" }, { "category": "vendor_fix", "details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "33" ], "url":"https://download.schneider-electric.com/files?p_enDocType=Firmware&p_Doc_Ref=APC_RPDU2G_706_EN&p_File_Name=apc_hw05_aos704_rpdu2g706_bootmon109.exe" }, { "category": "vendor_fix", "details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "33" ], "url":"https://sk.se.com/doc_info.aspx?DocRef=990-9958L_EN&isdvd=False&df=3&gid=891285" }, { "category": "vendor_fix", "details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download", "product_ids": [ "35" ], "url":"https://ckm-content.se.com/ckmContent/sfc/servlet.shepherd/document/download/0698V00000KscmiQAB" }, { "category": "vendor_fix", "details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download", "product_ids": [ "35" ], "url":"https://download.schneider-electric.com/files?p_Doc_Ref=990-6391_EN&p_enDocType=User+guide&p_File_Name=990-6391B.pdf" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 RPP application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "37", "39" ], "url":"https://www.se.com/uk/en/download/document/APC_RPP_704_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 for X84P, XPDU, XRDP, PMM, and XRDP2G applications includes fixes for these vulnerabilities.\nPlease contact your local support team for application upgrade.", "product_ids": [ "41", "43", "45", "47", "49", "51", "53", "55", "56", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 ATS4G application include fixes for these vulnerabilities and are available for download", "product_ids": [ "93" ], "url":"https://www.se.com/ww/en/download/document/APC_ATS4G_704_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 of these cooling applications include fixes for these vulnerabilities and have been released.\nPlease contact your local support team for upgrades.", "product_ids": [ "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 NB250 application includes fixes for these vulnerabilities and has been released", "product_ids": [ "95" ] , "url":"https://www.se.com/ww/en/download/document/APC_NB250_706_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 BM4 application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for BM4 application upgrade.", "product_ids": [ "97" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 MDC application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for MDC application upgrade.", "product_ids": [ "100" ], "url":"https://www.apc.com/us/en/support/contact-us/" } ], "acknowledgments": [ { "names": [ "Chua Wei Kiat", "Thanh Nguyen" ], "organization": "Fortinet’s Fortiguard Labs" } ] }, { "title": "CVE-2021-22814", "notes": [ { "category": "description", "text": "A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file.", "title": "CVE Description" } ], "cve": "CVE-2021-22814", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "product_status": { "known_affected": [ "1", "3", "5", "7", "9", "11", "13", "15", "17", "19", "21", "23", "25", "27", "29", "31", "33", "39", "35", "37", "41", "43", "45", "47", "49", "51", "53", "55", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91", "93", "95", "97", "99", "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "fixed": [ "2", "4", "6", "8", "10", "12", "14", "16", "18", "20", "22", "24", "26", "28", "30", "32", "34", "36", "38", "40", "42", "44", "46", "48", "50", "52", "54", "56", "58", "60", "62", "64", "66", "68", "70", "72", "74", "76", "78", "80", "82", "84", "86", "88", "90", "92", "94", "96", "98", "100", "102", "104", "106", "108", "110", "112", "114", "116", "118", "120", "122", "124", "126", "128", "130" ] }, "scores": [ { "products": [ "1", "3", "5", "7", "9", "11", "13", "15", "17", "19", "21", "23", "25", "27", "29", "31", "33", "39", "35", "37", "41", "43", "45", "47", "49", "51", "53", "55", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91", "93", "95", "97", "99", "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } } ], "remediations": [ { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "1" ], "url": "https://www.apc.com/in/en/product/SFSUMX704/ups-network-management-card-v7-0-4-firmware-for-smartups-galaxy-3500-with-ap9630-31-35/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "3","5" ], "url": "https://download.schneider-electric.com/files?p_File_Name=990-3403Z-EN.pdf&p_Doc_Ref=SPD_ARAJ-9TN74X_EN&p_enDocType=User+guide" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "1","2", "5" ], "url": "https://www.apc.com/in/en/product/SFSY704/ups-network-management-card-v7-0-4-firmware-for-symmetra-1phase-with-ap9630-31-35/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SYPX application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for SYPX application upgrade.", "product_ids": [ "7", "9" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later for the Symmetra PX 48/96/100/160 kW UPS (PX2), Symmetra PX 20/40 kW UPS (SY3P), Gutor (SXW, GVX), and Galaxy (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) includes fixes for these vulnerabilities has been released.\nPlease contact your local support team for application upgrades for these models.", "product_ids": [ "11", "13", "15", "17", "19", "21", "23", "25" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "27", "31" ], "url":"https://www.se.com/ww/en/download/document/APC_NMC3_SU_1511_EN/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "29" ], "url":"https://www.se.com/ww/en/download/document/APC_NMC3_SY_1511_EN/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "27", "29", "31" ], "url":"https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-SURELNOTE_EN&p_enDocType=User+guide&p_File_Name=990-6322E-EN.pdf" }, { "category": "vendor_fix", "details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "33" ], "url":"https://download.schneider-electric.com/files?p_enDocType=Firmware&p_Doc_Ref=APC_RPDU2G_706_EN&p_File_Name=apc_hw05_aos704_rpdu2g706_bootmon109.exe" }, { "category": "vendor_fix", "details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "33" ], "url":"https://sk.se.com/doc_info.aspx?DocRef=990-9958L_EN&isdvd=False&df=3&gid=891285" }, { "category": "vendor_fix", "details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download", "product_ids": [ "35" ], "url":"https://ckm-content.se.com/ckmContent/sfc/servlet.shepherd/document/download/0698V00000KscmiQAB" }, { "category": "vendor_fix", "details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download", "product_ids": [ "35" ], "url":"https://download.schneider-electric.com/files?p_Doc_Ref=990-6391_EN&p_enDocType=User+guide&p_File_Name=990-6391B.pdf" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 RPP application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "37", "39" ], "url":"https://www.se.com/uk/en/download/document/APC_RPP_704_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 for X84P, XPDU, XRDP, PMM, and XRDP2G applications includes fixes for these vulnerabilities.\nPlease contact your local support team for application upgrade.", "product_ids": [ "41", "43", "45", "47", "49", "51", "53", "55", "56", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 ATS4G application include fixes for these vulnerabilities and are available for download", "product_ids": [ "93" ], "url":"https://www.se.com/ww/en/download/document/APC_ATS4G_704_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 of these cooling applications include fixes for these vulnerabilities and have been released.\nPlease contact your local support team for upgrades.", "product_ids": [ "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 NB250 application includes fixes for these vulnerabilities and has been released", "product_ids": [ "95" ] , "url":"https://www.se.com/ww/en/download/document/APC_NB250_706_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 BM4 application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for BM4 application upgrade.", "product_ids": [ "97" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 MDC application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for MDC application upgrade.", "product_ids": [ "100" ], "url":"https://www.apc.com/us/en/support/contact-us/" } ], "acknowledgments": [ { "names": [ "Andrea Palanca" ], "organization": "Nozomi Networks" } ] }, { "title": "CVE-2021-22815", "notes": [ { "category": "description", "text": "A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file.", "title": "CVE Description" } ], "cve": "CVE-2021-22815", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "product_status": { "known_affected": [ "1", "3", "5", "7", "9", "11", "13", "15", "17", "19", "21", "23", "25", "27", "29", "31", "33", "39", "35", "37", "41", "43", "45", "47", "49", "51", "53", "55", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91", "93", "95", "97", "99", "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "fixed": [ "2", "4", "6", "8", "10", "12", "14", "16", "18", "20", "22", "24", "26", "28", "30", "32", "34", "36", "38", "40", "42", "44", "46", "48", "50", "52", "54", "56", "58", "60", "62", "64", "66", "68", "70", "72", "74", "76", "78", "80", "82", "84", "86", "88", "90", "92", "94", "96", "98", "100", "102", "104", "106", "108", "110", "112", "114", "116", "118", "120", "122", "124", "126", "128", "130" ] }, "scores": [ { "products": [ "1", "3", "5", "7", "9", "11", "13", "15", "17", "19", "21", "23", "25", "27", "29", "31", "33", "39", "35", "37", "41", "43", "45", "47", "49", "51", "53", "55", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91", "93", "95", "97", "99", "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } } ], "remediations": [ { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "1" ], "url": "https://www.apc.com/in/en/product/SFSUMX704/ups-network-management-card-v7-0-4-firmware-for-smartups-galaxy-3500-with-ap9630-31-35/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "3","5" ], "url": "https://download.schneider-electric.com/files?p_File_Name=990-3403Z-EN.pdf&p_Doc_Ref=SPD_ARAJ-9TN74X_EN&p_enDocType=User+guide" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SUMX and SY applications includes fixes for these vulnerabilities and are available for download. ", "product_ids": [ "1","2", "5" ], "url": "https://www.apc.com/in/en/product/SFSY704/ups-network-management-card-v7-0-4-firmware-for-symmetra-1phase-with-ap9630-31-35/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 SYPX application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for SYPX application upgrade.", "product_ids": [ "7", "9" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later for the Symmetra PX 48/96/100/160 kW UPS (PX2), Symmetra PX 20/40 kW UPS (SY3P), Gutor (SXW, GVX), and Galaxy (G300, GVMTS, GVMSA, GVXTS, GVXSA, G7K, GFC, G9KCHU, CHU) includes fixes for these vulnerabilities has been released.\nPlease contact your local support team for application upgrades for these models.", "product_ids": [ "11", "13", "15", "17", "19", "21", "23", "25" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "27", "31" ], "url":"https://www.se.com/ww/en/download/document/APC_NMC3_SU_1511_EN/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "29" ], "url":"https://www.se.com/ww/en/download/document/APC_NMC3_SY_1511_EN/" }, { "category": "vendor_fix", "details": "V1.5 or later of the NMC3 SU and SY applications include fixes for these vulnerabilities and are available for download", "product_ids": [ "27", "29", "31" ], "url":"https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-SURELNOTE_EN&p_enDocType=User+guide&p_File_Name=990-6322E-EN.pdf" }, { "category": "vendor_fix", "details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "33" ], "url":"https://download.schneider-electric.com/files?p_enDocType=Firmware&p_Doc_Ref=APC_RPDU2G_706_EN&p_File_Name=apc_hw05_aos704_rpdu2g706_bootmon109.exe" }, { "category": "vendor_fix", "details": "V7.0.6 or later of the NMC2 RPDU2G application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "33" ], "url":"https://sk.se.com/doc_info.aspx?DocRef=990-9958L_EN&isdvd=False&df=3&gid=891285" }, { "category": "vendor_fix", "details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download", "product_ids": [ "35" ], "url":"https://ckm-content.se.com/ckmContent/sfc/servlet.shepherd/document/download/0698V00000KscmiQAB" }, { "category": "vendor_fix", "details": "NMC3 RPDU application V1.2.0.2 with NMC3 AOS v1.5.0 includes fixes for these vulnerabilities and are available for download", "product_ids": [ "35" ], "url":"https://download.schneider-electric.com/files?p_Doc_Ref=990-6391_EN&p_enDocType=User+guide&p_File_Name=990-6391B.pdf" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 RPP application includes fixes for these vulnerabilities and is available for download", "product_ids": [ "37", "39" ], "url":"https://www.se.com/uk/en/download/document/APC_RPP_704_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 for X84P, XPDU, XRDP, PMM, and XRDP2G applications includes fixes for these vulnerabilities.\nPlease contact your local support team for application upgrade.", "product_ids": [ "41", "43", "45", "47", "49", "51", "53", "55", "56", "57", "59", "61", "63", "65", "67", "69", "71", "73", "75", "77", "79", "81", "83", "85", "87", "89", "91" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 ATS4G application include fixes for these vulnerabilities and are available for download", "product_ids": [ "93" ], "url":"https://www.se.com/ww/en/download/document/APC_ATS4G_704_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 of these cooling applications include fixes for these vulnerabilities and have been released.\nPlease contact your local support team for upgrades.", "product_ids": [ "101", "103", "105", "107", "109", "111", "113", "115", "117", "119", "121", "123", "125", "127", "129" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 NB250 application includes fixes for these vulnerabilities and has been released", "product_ids": [ "95" ] , "url":"https://www.se.com/ww/en/download/document/APC_NB250_706_EN/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 BM4 application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for BM4 application upgrade.", "product_ids": [ "97" ], "url":"https://www.apc.com/us/en/support/contact-us/" }, { "category": "vendor_fix", "details": "V7.0.4 or later of the NMC2 MDC application includes fixes for these vulnerabilities and has been released.\nPlease contact your local support team for MDC application upgrade.", "product_ids": [ "100" ], "url":"https://www.apc.com/us/en/support/contact-us/" } ], "acknowledgments": [ { "names": [ "Chua Wei Kiat", "Thanh Nguyen" ], "organization": "Fortinet’s Fortiguard Labs" } ] } ] }