Schneider Electric EcoStruxure
Advisory ansehen veröffentlicht 2018-12-20
Successful exploitation of this vulnerability could allow an attacker to use this device as a platform to conduct a phishing attack.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-7797US | medium6.1 | — | ||
A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxu… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-18-354-02 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (3)
- MitigationEcoStruxure Energy Expert
All controllers should reside in locked cabinets and never be left in “Program” mode.
- MitigationEcoStruxure Power Monitoring Expert (PME)
All controllers should reside in locked cabinets and never be left in “Program” mode.
- MitigationEcoStruxure Power SCADA Operation (PSO)
All controllers should reside in locked cabinets and never be left in “Program” mode.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan