CVE-2018-7797

State
Published
Severity
Not scored
Published
Dec 17, 2018
Updated
Aug 5, 2024
Reserved
Mar 8, 2018

Read the record on cve.org

Description

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure Energy Expert 1.3 (formerly Power Manager), EcoStruxure Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxure Power Monitoring Expert (PME) v9.0, EcoStruxure Energy Expert v2.0, and EcoStruxure Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module which could cause a phishing attack when redirected to a malicious site.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxureª Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxureª Energy Expert 1.3 (formerly Power Manager), EcoStruxureª Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxureª Power Monitoring Expert (PME) v9.0, EcoStruxureª Energy Expert v2.0, and EcoStruxureªPower SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards ModuleSchneider Electric SE
  • EcoStruxure&#xaaAffected
  • Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure&#xaaAffected
  • Energy Expert 1.3 (formerly Power Manager), EcoStruxure&#xaaAffected
  • Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxure&#xaaAffected
  • Power Monitoring Expert (PME) v9.0, EcoStruxure&#xaaAffected
  • Energy Expert v2.0, and EcoStruxure&#xaaAffected
  • Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards ModuleAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.