critical9.8
CVE-2018-7820
A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to b…
Impact
A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Ap9630 Firmware | before 6.7.2 |
| Schneider-Electric | Smart-Ups Srt 5kva Firmware | before 6.7.2 |
| Schneider-Electric | Ap9631 Firmware | before 6.7.2 |
| Schneider-Electric | Ap9635 Firmware | before 6.7.2 |