Galaxy VS and Galaxy VL Path Traversal Vulnerability Security Notification

This document details a path traversal vulnerability (CVE-2023-6032) affecting Schneider Electric Galaxy VL (v12.21) and Galaxy VS (v6.82) UPS products, which could allow file system enumeration and file download via the Network Management Card. It provides remediation steps (upgrading to versions 13.18.1 for Galaxy VL and 6.101 for Galaxy VS) and mitigation measures, including firewall deployment and cybersecurity best practices.