A cleartext transmission of sensitive information vulnerability exists in Schneider Electrics 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS. he integrated web server (Port 80/443/TCP) of the affected devices could allow remote attackers to discover an administrative account. If default on device, it is not using a SSL in settings and if multiple request of the page Access Control (IP-address device/ups/pas_cont.htm) account data will be sent in cleartext
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| 66074_mge_network_management_card_transverse | Schneider-electric | - (including) | - (including) |