CVE-2018-7245: Critical severity Schneider-electric 66074 Mge Network Management Card Transverse vulnerability
An improper authorization vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the affected devices could allow a remote attacker to change UPS control and shutdown parameters or other critical settings without authorization.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7245?
CVE-2018-7245 has been reported with a medium severity level.
How do I fix CVE-2018-7245?
To fix CVE-2018-7245, it is recommended to update the affected Schneider Electric devices with the latest security patches.
Which devices are affected by CVE-2018-7245?
CVE-2018-7245 affects the Schneider Electric 66074 MGE Network Management Card Transverse.
What can attackers do in CVE-2018-7245?
Attackers exploiting CVE-2018-7245 could change UPS control and shutdown parameters remotely.
Is authentication bypass involved in CVE-2018-7245?
Yes, CVE-2018-7245 is classified as an improper authorization vulnerability.