What’s Vulnerable › Vulnerabilities

CVE-2018-7797

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-12-17 · updated 2026-06-17
• Weakness: CWE-601

Description

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure Energy Expert 1.3 (formerly Power Manager), EcoStruxure Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxure Power Monitoring Expert (PME) v9.0, EcoStruxure Energy Expert v2.0, and EcoStruxure Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module which could cause a phishing attack when redirected to a malicious site.

Affected products

• Schneider-Electric Ecostruxure Energy Expert: 1.3, 2.0
• EcoStruxure Power Monitoring Expert (Versions 2020 and prior): 8.2, 9.0
• Schneider-Electric Ecostruxure Power Scada Operation: 8.2, 9.0

References

• http://www.securityfocus.com/bid/106277
• https://www.schneider-electric.com/en/download/document/SEVD-2018-347-01/
• http://www.securityfocus.com/bid/106277
• https://www.schneider-electric.com/en/download/document/SEVD-2018-347-01/

Get alerted when CVE-2018-7797 or the next vulnerability affects your stack