CyberRota Analysis
AI-GeneratedThe vulnerability in apcupsd affects the handling of uninitialized stack memory in the getupsvar() function, specifically when processing certain STATUS lines with insufficient tokens. This can lead to the disclosure of sensitive information through uninitialized data in HTTP responses. Organizations using affected versions of apcupsd should prioritize patching this issue to mitigate potential information leakage risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
apcupsd through 3.14.14 discloses uninitialized stack memory in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi. On the single-field path, when the matched STATUS line has fewer than three whitespace-separated tokens, sscanf("%*s %*s %s", answer) performs no assignment but the function returns success, and thus the caller prints the uninitialized destination buffer into the HTTP response.