CVEvulnerability

CVE-2018-7797

6.1 MEDIUM Published 2018-12-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-12-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-601

Description

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure Energy Expert 1.3 (formerly Power Manager), EcoStruxure Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxure Power Monitoring Expert (PME) v9.0, EcoStruxure Energy Expert v2.0, and EcoStruxure Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module which could cause a phishing attack when redirected to a malicious site.

Affected configurations

• schneider-electric ecostruxure energy expert 1.3 • schneider-electric ecostruxure energy expert 2.0 • schneider-electric ecostruxure power monitoring expert 8.2 • schneider-electric ecostruxure power monitoring expert 9.0 • schneider-electric ecostruxure power scada operation 8.2 • schneider-electric ecostruxure power scada operation 9.0

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References