Schneider Electric EcoStruxure

1. EXECUTIVE SUMMARY CVSS v3 7.4 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: EcoStruxure Vulnerability: Open Redirect 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to use this device as a platform to...

CVE-2018-7797

The vulnerability CVE-2018-7797 is an Open Redirect in Schneider Electric EcoStruxure products, enabling a phishing-capable redirect to untrusted sites. Affected are PME/Energy Expert/PSO components: PME v8.2 (all editions), Energy Expert 1.3, PSO v8.2 AR&D, PME v9.0, Energy Expert v2.0, and PSO ...