CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
64.6%
An improper authorization vulnerability exists In Schneider Electric’s 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server (Port 80/443/TCP) of the affected devices could allow a remote attacker to change UPS control and shutdown parameters or other critical settings without authorization.
Vendor | Product | Version | CPE |
---|---|---|---|
schneider-electric | 66074_mge_network_management_card_transverse | - | cpe:2.3:h:schneider-electric:66074_mge_network_management_card_transverse:-:*:*:*:*:*:*:* |
schneider-electric | mge_comet_ups | - | cpe:2.3:h:schneider-electric:mge_comet_ups:-:*:*:*:*:*:*:* |
schneider-electric | mge_eps_6000 | - | cpe:2.3:h:schneider-electric:mge_eps_6000:-:*:*:*:*:*:*:* |
schneider-electric | mge_eps_7000 | - | cpe:2.3:h:schneider-electric:mge_eps_7000:-:*:*:*:*:*:*:* |
schneider-electric | mge_eps_8000 | - | cpe:2.3:h:schneider-electric:mge_eps_8000:-:*:*:*:*:*:*:* |
schneider-electric | mge_galaxy_3000 | - | cpe:2.3:h:schneider-electric:mge_galaxy_3000:-:*:*:*:*:*:*:* |
schneider-electric | mge_galaxy_4000 | - | cpe:2.3:h:schneider-electric:mge_galaxy_4000:-:*:*:*:*:*:*:* |
schneider-electric | mge_galaxy_5000 | - | cpe:2.3:h:schneider-electric:mge_galaxy_5000:-:*:*:*:*:*:*:* |
schneider-electric | mge_galaxy_6000 | - | cpe:2.3:h:schneider-electric:mge_galaxy_6000:-:*:*:*:*:*:*:* |
schneider-electric | mge_galaxy_9000 | - | cpe:2.3:h:schneider-electric:mge_galaxy_9000:-:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
64.6%