CVE-2018-7245: vulnerability in Schneider Electric SE 66074 MGE Network…
Published · Updated
Follow this CVE+ Monitor 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.2%
An improper authorization vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the affected devices could allow a remote attacker to change UPS control and shutdown parameters or other critical settings without authorization.
Affected products
Schneider Electric SE · 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STSRelated CVEs — Schneider Electric SE 66074 MGE Network…
In the same product, most dangerous first.