CVE-2018-7797: URL Redirection to Untrusted Site

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert formerly Power Manager - EcoStruxure Power Monitoring Expert PME v8.2 all editions, EcoStruxure Energy Expert 1.3 formerly Power Manager, EcoStruxure Power SCADA Operation PSO 8.2 Advanced Reports and Dashboards...

PT-2018-2178

Name of the Vulnerable Software and Affected Versions EcoStruxure Power Monitoring Expert PME versions 8.2 through 9.0 EcoStruxure Energy Expert versions 1.3 through 2.0 EcoStruxure Power SCADA Operation PSO versions 8.2 through 9.0 Advanced Reports and Dashboards Module Description A URL...

Janitza UMG Power Supply Monitoring Injection

The vulnerability of the web interface of Microprogramming Software for Control Systems of Power Supply Networks Janitza UMG 508, 509, 511, 604, 605 exists due to the lack of measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to inject...

Janitza UMG PIN Calculation

The vulnerability of the Microprogramming Software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems is related to the incorrect generation of session keys. Exploiting this vulnerability allows a remote attacker to calculate the PIN code by performing mathematical calculation...

Janitza UMG Power Supply Monitoring System Access

The vulnerability of the web interface of the Microprogramming Software for Control Systems of Power Supply Devices Janitza UMG 508, 509, 511, 604, 605 arises from the fact that these devices only support short PIN codes for authentication. Exploiting this vulnerability could allow an attacker,...

Schneider Electric Floating License Manager Vulnerability

OVERVIEW Schneider Electric had become aware of an “unquoted service path” vulnerability in the Schneider Electric Floating License Manager, produced a patchSchneider Electric Security Notification SEVD 2014-015-01v3,...