CVE-2018-7246: Schneider Electric 66074 Mge Network Management Card Transverse

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A cleartext transmission of sensitive information vulnerability exists in Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. he integrated web server (Port 80/443/TCP) of the affected devices could allow remote attackers to discover an administrative account. If default on device, it is not using a SSL in settings and if multiple request of the page "Access Control" (IP-address device/ups/pas_cont.htm) account data will be sent in cleartext

Affected products

• Schneider Electric 66074 Mge Network Management Card Transverse: affected versions not specified

Published 2018-04-18. Last modified 2026-06-17.