Security Vulnerabilities in APC Smart-UPS Models

Schneider Electric recently published a security vulnerability in several APC Smart-UPS models which, if compromised, may allow for potential unauthorized access and control of the device, including remote shutdown. See more detail below.

Overview:

Some of the latest APC Smart-UPS models are controlled through a Cloud connection. A recent study performed by Armis researchers found that an attacker exploiting the TLStorm vulnerabilities could remotely take over devices via the Internet without any user interaction or signs of attack. As a result, attackers can perform a remote-code execution (RCE) attack on a device, which in turn could be used to alter the operations of the UPS to physically damage the device itself or other assets connected to it.

Schneider Electric is aware of the vulnerabilities associated with APC Smart-UPS uninterruptable power supply devices which, if compromised, may allow for potential unauthorized access and control of the device. Upon learning of these vulnerabilities, Schneider has worked diligently to develop remediations and mitigations, and disclose in a timely, responsible manner so that our customers and end-users can better protect their people, assets, and operations.

Schneider is recommending that customers immediately install available firmware updates provided below, which include remediations to reduce the risk of successful exploitation of these vulnerabilities. In addition, customers should also immediately ensure they have implemented cybersecurity best practices across their operations to protect themselves from exploitation of these vulnerabilities. Where appropriate, this includes locating their systems and remotely accessible devices behind firewalls; installing physical controls to prevent unauthorized access; preventing mission-critical systems and devices from being accessed from outside networks. More information on recommended security practices can be found in the General Security Recommendations section below.

What Systems are Impacted?

What Can You Do?

Schneider / APC recommends that customers immediately install available firmware updates provided below, which include remediations to reduce the risk of successful exploitation of these vulnerabilities.

You can learn more by visiting their Customer Care Center, or visiting the Schneider Electric’s published Security Notification on this issue here 

If you are not sure if your UPS system falls in these parameters, or need hands on support, contact Quality Power Solutions today!

Contact Us