What’s Vulnerable › Vulnerabilities

CVE-2000-1242

• Severity: critical (CVSS 9.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2000-12-31 · updated 2026-09-23

Description

The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access.

Affected products

• PowerChute Business Edition software V9.0.x and earlier: all versions

References

• http://governmentsecurity.org/articles/DefaultLoginsandPasswordsforNetworkedDevices.php
• http://www.osvdb.org/30768
• http://governmentsecurity.org/articles/DefaultLoginsandPasswordsforNetworkedDevices.php
• http://www.osvdb.org/30768

Get alerted when CVE-2000-1242 or the next vulnerability affects your stack