9.8
CVSSv3

CVE-2018-7820

Published: 17/09/2019 Updated: 01/03/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

schneider-electric ap9630_firmware

schneider-electric smart-ups_srt_5kva_firmware

schneider-electric ap9631_firmware

schneider-electric ap9635_firmware