CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-7243

An authorization bypass vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the affected devices could allow a remote attacker to get a full access to device, bypassing the authorization system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.024

EPSS Ranking 84.2%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

References

Products affected by CVE-2018-7243

Schneider-Electric » 66074 Mge Network Management Card Transverse » Version: N/A

cpe:2.3:h:schneider-electric:66074_mge_network_management_card_transverse:-
Schneider-Electric » Mge Comet Ups » Version: N/A

cpe:2.3:h:schneider-electric:mge_comet_ups:-
Schneider-Electric » Mge Eps 6000 » Version: N/A

cpe:2.3:h:schneider-electric:mge_eps_6000:-
Schneider-Electric » Mge Eps 7000 » Version: N/A

cpe:2.3:h:schneider-electric:mge_eps_7000:-
Schneider-Electric » Mge Eps 8000 » Version: N/A

cpe:2.3:h:schneider-electric:mge_eps_8000:-
Schneider-Electric » Mge Galaxy 3000 » Version: N/A

cpe:2.3:h:schneider-electric:mge_galaxy_3000:-
Schneider-Electric » Mge Galaxy 4000 » Version: N/A

cpe:2.3:h:schneider-electric:mge_galaxy_4000:-
Schneider-Electric » Mge Galaxy 5000 » Version: N/A

cpe:2.3:h:schneider-electric:mge_galaxy_5000:-
Schneider-Electric » Mge Galaxy 6000 » Version: N/A

cpe:2.3:h:schneider-electric:mge_galaxy_6000:-
Schneider-Electric » Mge Galaxy 9000 » Version: N/A

cpe:2.3:h:schneider-electric:mge_galaxy_9000:-
Schneider-Electric » Mge Galaxy Pw » Version: N/A

cpe:2.3:h:schneider-electric:mge_galaxy_pw:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-7243

Products

Pricing

Contact Us