CVE-2018-7820
Critical
Description
A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSchneider-electric Ap9630 Firmware
PublishedSep 17, 2019
First seenSep 17, 2019
Weakness typeCWE-255CWE-255
How to fix
Update
- schneider-electric ap9630_firmware6.7.2 or later
- schneider-electric smart-ups_srt_5kva_firmware6.7.2 or later
- schneider-electric ap9631_firmware6.7.2 or later
- schneider-electric ap9635_firmware6.7.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric ap9630_firmware | v < 6.7.2 | 6.7.2 |
| schneider-electric smart-ups_srt_5kva_firmware | v < 6.7.2 | 6.7.2 |
| schneider-electric ap9631_firmware | v < 6.7.2 | 6.7.2 |
| schneider-electric ap9635_firmware | v < 6.7.2 | 6.7.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.