CVE-2018-7820: Schneider Electric AP9630 Firmware

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled.

Affected products

• Schneider Electric AP9630 Firmware: before 6.7.2 (fixed in 6.7.2)
• Schneider Electric AP9631 Firmware: before 6.7.2 (fixed in 6.7.2)
• Schneider Electric AP9635 Firmware: before 6.7.2 (fixed in 6.7.2)
• Schneider Electric Smart-Ups Srt 5kva Firmware: before 6.7.2 (fixed in 6.7.2)

Published 2019-09-17. Last modified 2026-06-17.