CVE-2018-7246
CVE-2018-7246
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
18 abr 2018Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A cleartext transmission of sensitive information vulnerability exists in Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. he integrated web server (Port 80/443/TCP) of the affected devices could allow remote attackers to discover an administrative account. If default on device, it is not using a SSL in settings and if multiple request of the page "Access Control" (IP-address device/ups/pas_cont.htm) account data will be sent in cleartext
Productos afectados
Schneider Electric SE · 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →