CVE-2018-7244

An information disclosure vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the affected devices could allow a remote attacker to obtain sensitive device information if network access was obtained.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cybersecurity@se.com

Published

2018-04-18

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• 66074 Mge Network Management Card Transverse (Schneider-electric)
• 66074 Mge Network Management Card Transverse Installed In Mge Ups And Mge Sts (Schneider Electric Se)

References

• https://www.schneider-electric.com/en/download/document/SEVD-2018-074-01/