CVE-2022-22805
9.8
CRITICAL · CVSS 3.1 · EPSS 11.9% (pctl 96)
Patch early
EPSS 11.9% — above the 10% action threshold.
Description
A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause remote code execution when an improperly handled TLS packet is reassembled. Affected Product: SmartConnect Family: SMT Series (SMT Series ID=1015: UPS 04.5 and prior), SMC Series (SMC Series ID=1018: UPS 04.2 and prior), SMTL Series (SMTL Series ID=1026: UPS 02.9 and prior), SCL Series (SCL Series ID=1029: UPS 02.5 and prior / SCL Series ID=1030: UPS 02.5 and prior / SCL Series ID=1036: UPS 02.5 and prior / SCL Series ID=1037: UPS 03.1 and prior), SMX Series (SMX Series ID=1031: UPS 03.1 and prior)
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 11.88% — more likely to be exploited than 96% of all CVEs |
| Weakness | CWE-120 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2022-03-09 |
| Last modified | 2026-06-17 |
Affected (16)
| Vendor | Product |
|---|---|
| schneider-electric | scl series 1029 ups |
| schneider-electric | scl series 1029 ups firmware |
| schneider-electric | scl series 1030 ups |
| schneider-electric | scl series 1030 ups firmware |
| schneider-electric | scl series 1036 ups |
| schneider-electric | scl series 1036 ups firmware |
| schneider-electric | scl series 1037 ups |
| schneider-electric | scl series 1037 ups firmware |
| schneider-electric | smc series 1018 ups |
| schneider-electric | smc series 1018 ups firmware |
| schneider-electric | smt series 1015 ups |
| schneider-electric | smt series 1015 ups firmware |
| schneider-electric | smtl series 1026 ups |
| schneider-electric | smtl series 1026 ups firmware |
| schneider-electric | smx series 1031 ups |
| schneider-electric | smx series 1031 ups firmware |
References
→ the Explorer · watch your stack · NVD