CVE-2018-7245
First published: Wed Apr 18 2018(Updated: )
An improper authorization vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the affected devices could allow a remote attacker to change UPS control and shutdown parameters or other critical settings without authorization.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric 66074 Mge Network Management Card Transverse | ||
| Schneider-electric Mge Comet Ups | ||
| Schneider-electric Mge Eps 6000 | ||
| Schneider-electric Mge Eps 7000 | ||
| Schneider-electric Mge Eps 8000 | ||
| Schneider-electric Mge Galaxy 3000 | ||
| Schneider-electric Mge Galaxy 4000 | ||
| Schneider-electric Mge Galaxy 5000 | ||
| Schneider-electric Mge Galaxy 6000 | ||
| Schneider-electric Mge Galaxy 9000 | ||
| Schneider-electric Mge Galaxy Pw |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/references
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/schneider-electric
- canonical/schneider-electric 66074 mge network management card transverse
- canonical/schneider-electric mge comet ups
- canonical/schneider-electric mge eps 6000
- canonical/schneider-electric mge eps 7000
- canonical/schneider-electric mge eps 8000
- canonical/schneider-electric mge galaxy 3000
- canonical/schneider-electric mge galaxy 4000
- canonical/schneider-electric mge galaxy 5000
- canonical/schneider-electric mge galaxy 6000
- canonical/schneider-electric mge galaxy 9000
- canonical/schneider-electric mge galaxy pw