← Back

CVE-2018-7797

nvd nist
Published: Dec 17, 2018Modified: Nov 21, 2024

JSON object

Loading...
6.1
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure Energy Expert 1.3 (formerly Power Manager), EcoStruxure Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxure Power Monitoring Expert (PME) v9.0, EcoStruxure Energy Expert v2.0, and EcoStruxure Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module which could cause a phishing attack when redirected to a malicious site.

Affected (6)

Schneider Electric
3 products
Ecostruxure Energy Expert
Ecostruxure Power Monitoring Expert
Ecostruxure Power Scada Operation
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Ecostruxure Energy Expert
Version 1.3
Ecostruxure Energy Expert
Version 2.0
Ecostruxure Power Monitoring Expert
Version 8.2
Ecostruxure Power Monitoring Expert
Version 9.0
Ecostruxure Power Scada Operation
Version 8.2
Ecostruxure Power Scada Operation
Version 9.0

Related CWEs

CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (4)

Source: cybersecurity@se.com
Third Party AdvisoryVDB Entry
Source: cybersecurity@se.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.