CVE-2018-7243

An authorization bypass vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the affected devices could allow a remote attacker to get a full access to device, bypassing the authorization system.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cybersecurity@se.com

Published

2018-04-18

Last modified

2024-08-05

Affected products

• 66074 Mge Network Management Card Transverse (Schneider-electric)
• 66074 Mge Network Management Card Transverse Installed In Mge Ups And Mge Sts (Schneider Electric Se)

References

• https://www.schneider-electric.com/en/download/document/SEVD-2018-074-01/