Vulnerability Details CVE-2018-7797
A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure Energy Expert 1.3 (formerly Power Manager), EcoStruxure Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxure Power Monitoring Expert (PME) v9.0, EcoStruxure Energy Expert v2.0, and EcoStruxure Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module which could cause a phishing attack when redirected to a malicious site.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.3%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 5.8
References
Products affected by CVE-2018-7797
-
cpe:2.3:a:schneider-electric:ecostruxure_energy_expert:1.3
-
cpe:2.3:a:schneider-electric:ecostruxure_energy_expert:2.0
-
cpe:2.3:a:schneider-electric:ecostruxure_power_monitoring_expert:8.2
-
cpe:2.3:a:schneider-electric:ecostruxure_power_monitoring_expert:9.0
-
cpe:2.3:a:schneider-electric:ecostruxure_power_scada_operation:8.2
-
cpe:2.3:a:schneider-electric:ecostruxure_power_scada_operation:9.0