Description (CNA)
A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure Energy Expert 1.3 (formerly Power Manager), EcoStruxure Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxure Power Monitoring Expert (PME) v9.0, EcoStruxure Energy Expert v2.0, and EcoStruxure Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module which could cause a phishing attack when redirected to a malicious site.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schneider Electric SE / Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxureª Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxureª Energy Expert 1.3 (formerly Power Manager), EcoStruxureª Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxureª Power Monitoring Expert (PME) v9.0, EcoStruxureª Energy Expert v2.0, and EcoStruxureªPower SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module | affected EcoStruxureª affected Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxureª affected Energy Expert 1.3 (formerly Power Manager), EcoStruxureª affected Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxureª affected Power Monitoring Expert (PME) v9.0, EcoStruxureª affected Energy Expert v2.0, and EcoStruxureª affected Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/106277
- https://www.schneider-electric.com/en/download/document/SEVD-2018-347-01/
ADP enrichment
No English description supplied.