A cleartext transmission of sensitive information vulnerability exists in Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. he integrated web server (Port 80/443/TCP) of the affected devices could allow remote attackers to discover an administrative account. If default on device, it is not using a SSL in settings and if multiple request of the page "Access Control" (IP-address device/ups/pas_cont.htm) account data will be sent in cleartext
Existe una vulnerabilidad de transmisión en texto claro de información sensible en 66074 MGE Network Management Card Transverse, de Schneider Electric, instalado en MGE UPS y MGE STS. El servidor web integrado (Puerto 80/443/TCP) de los dispositivos afectados podría permitir que atacantes remotos descubran una cuenta administrativa. Por defecto, si en el dispositivo no se emplea SSL en las opciones y si hay múltiples peticiones de la página "Access Control" (IP-address device/ups/pas_cont.htm), los datos de la cuenta se enviarán en texto claro.
AV:N/AC:L/Au:N/C:P/I:N/A:N
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-319
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | 66074_mge_network_management_card_transverse | - | <built-in method update of dict object at 0x7e610742f180> | Hardware |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:h:schneider-electric:66074_mge_network_management_card_transverse:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:schneider-electric:mge_comet_ups:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:mge_eps_6000:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:mge_eps_7000:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:mge_eps_8000:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:mge_galaxy_3000:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:mge_galaxy_4000:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:mge_galaxy_5000:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:mge_galaxy_6000:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:mge_galaxy_9000:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:mge_galaxy_pw:-:*:*:*:*:*:*:* |