CVE-2018-7797
A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure Energy Expert 1.3 (formerly Power Manager), EcoStruxure Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxure Power Monitoring Expert (PME) v9.0, EcoStruxure Energy Expert v2.0, and EcoStruxure Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module which could cause a phishing attack when redirected to a malicious site.
- Score
- CVSS 3.0 6.1 Medium
- Status
- Modified - cybersecurity@se.com
- Published
- 2018-12-17
- Last modified
- 2024-08-05
- Weaknesses
- CWE-601
Affected products
- Ecostruxure Energy Expert (Schneider-electric)
- Ecostruxure Power Monitoring Expert (Schneider-electric)
- Ecostruxure Power Scada Operation (Schneider-electric)
- And Ecostruxurexaapower Scada Operation Pso 9.0 Advanced Reports And Dashboards Module (Schneider Electric Se)
- Ecostruxurexaa Energy Expert 1.3 Formerly Power Manager (Schneider Electric Se)
- Ecostruxurexaa Energy Expert V2.0 (Schneider Electric Se)
- Ecostruxurexaa Power Monitoring Expert Pme V9.0 (Schneider Electric Se)
- Ecostruxurexaa Power Scada Operation Pso 8.2 Advanced Reports And Dashboards Module (Schneider Electric Se)
- Energy Expert Formerly Power Manager - Ecostruxurexaa Power Monitoring Expert Pme V8.2 All Editions (Schneider Electric Se)
- Power Monitoring Expert (Schneider Electric Se)
References
- http://www.securityfocus.com/bid/106277
- https://www.schneider-electric.com/en/download/document/SEVD-2018-347-01/