Schneider Electric MGE UPS and MGE STS 66074 MGE Network Management Card Transverse Information Disclosure Vulnerability

The Schneider Electric MGE UPS and MGE STS are both products of the French company Schneider Electric.The Schneider Electric MGE UPS is an uninterruptible power supply unit.The MGE STS is a static toggle switch.66074 MGE Network Management Card Transverse is one of the network management cards...

Schneider Electric MGE UPS and MGE STS 66074 MGE Network Management Card Transverse Information Disclosure Vulnerability (CNVD-2018-11130)

The Schneider Electric MGE UPS and MGE STS are both products of the French company Schneider Electric.The Schneider Electric MGE UPS is an uninterruptible power supply unit.The MGE STS is a static toggle switch.66074 MGE Network Management Card Transverse is one of the network management cards...

Schneider Electric MGE UPS and MGE STS 66074 MGE Network Management Card Transverse Sensitive Information Vulnerability (CNVD-2018-11132)

The Schneider Electric MGE UPS and MGE STS are both products of the French company Schneider Electric.The Schneider Electric MGE UPS is an uninterruptible power supply unit.The MGE STS is a static toggle switch.66074 MGE Network Management Card Transverse is one of the network management cards...

John Summers Q&A - Evanta Global CIO Executive Summit

Akamai's John Summers, VP & CTO, spoke at the recent Evanta Global CIO Executive Summit, a gathering of 75 major organization CIOs. His session was titled, "Cloud Security - Adopt Zero Trust and Put Asset-Level Safeguards in Place." Here are some of the key questions he addressed. How do you...

The vulnerability of the HPE Network Node Manager i (NNMi) software, a computer network management tool, stems from security flaws. This allows attackers to execute cross-site scripting (XSS) attacks, open redirect attacks, and bypass security restrictions.

The vulnerability of the HPE Network Node Manager i NNMi software solution is related to security flaws in its mechanisms. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks, open redirection attacks, and bypass system security restrictions...

CVE-2017-9658

Certain 802.11 network management messages have been determined to invoke wireless access point blacklisting security defenses when not required, which can necessitate intervention by hospital staff to reset the device and reestablish a network connection to the Wi-Fi access point. During this...

Input validation

Certain 802.11 network management messages have been determined to invoke wireless access point blacklisting security defenses when not required, which can necessitate intervention by hospital staff to reset the device and reestablish a network connection to the Wi-Fi access point. During this...

CVE-2017-9658

CVE-2017-9658 affects Philips IntelliVue MX40 WLAN monitors (Version B.06.18 and prior) under certain 802.11 network conditions. The root causes are described as improper cleanup on thrown exception (CWE-460) and improper handling of exceptional conditions (CWE-755). Under these conditions, the M...

Ericson-LG iPECS NMS Information Disclosure Vulnerability

The Ericsson-LG iPECS NMS is a network management solution from Ericson-LG in Korea. A security vulnerability exists in the web application in Ericsson-LG iPECS NMS version A.1Ac. The vulnerability can be exploited by an attacker to obtain sensitive information e.g., NMS admin credentials and...

Authorization

An improper authorization vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server Port 80/443/TCP of the affected devices could allow a remote attacker to change UPS control and shutdown parameters or...

CVE-2018-7245

An improper authorization vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server Port 80/443/TCP of the affected devices could allow a remote attacker to change UPS control and shutdown parameters or...

Authorization

An authorization bypass vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server Port 80/443/TCP of the affected devices could allow a remote attacker to get a full access to device, bypassing the...

CVE-2018-7244

An information disclosure vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server Port 80/443/TCP of the affected devices could allow a remote attacker to obtain sensitive device information if network...

CVE-2018-7243

An authorization bypass vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server Port 80/443/TCP of the affected devices could allow a remote attacker to get a full access to device, bypassing the...

Information disclosure

An information disclosure vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server Port 80/443/TCP of the affected devices could allow a remote attacker to obtain sensitive device information if network...

CVE-2018-7246

A cleartext transmission of sensitive information vulnerability exists in Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. he integrated web server Port 80/443/TCP of the affected devices could allow remote attackers to discover an administrative...

CVE-2018-7245

The CVE-2018-7245 vulnerability affects Schneider Electric’s 66074 MGE Network Management Card Transverse (installed in MGE UPS and MGE STS). Root cause: improper authorization in the device’s integrated web server (HTTP/HTTPS) that could allow an unauthenticated, remote attacker to modify UPS co...

CVE-2018-7246

CVE-2018-7246 affects Schneider Electric’s 66074 MGE Network Management Card Transverse (SNMP/Web Card) used in MGE UPS and MGE STS. The vulnerability arises from the integrated web server (port 80/443) transmitting sensitive data in cleartext, enabling remote attackers to discover an administrat...

CVE-2018-7243

Schneider Electric 66074 MGE Network Management Card Transverse in MGE UPS/MGE STS is affected by CVE-2018-7243, an authorization bypass via the device's integrated web server (ports 80/443/TCP). The vulnerability allows a remote attacker to gain full access to the device by bypassing authenticat...

CVE-2018-7244

An information disclosure vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. The integrated web server Port 80/443/TCP of the affected devices could allow a remote attacker to obtain sensitive device information if network...