CVE-2018-7820

A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cybersecurity@se.com

Published

2019-09-17

Last modified

2024-08-05

Weaknesses

CWE-255, CWE-522

Affected products

• Ap9630 Firmware (Schneider-electric)
• Ap9631 Firmware (Schneider-electric)
• Ap9635 Firmware (Schneider-electric)
• Smart-ups Srt 5kva Firmware (Schneider-electric)
• Apc Ups Network Management Card 2 Aos (Schneider Electric Se)

References

• https://www.apc.com/salestools/CCON-BFQMXC/CCON-BFQMXC_R0_EN.pdf