Critical severity9.8NVD Advisory· Published Sep 17, 2019· Updated Jun 17, 2026
CVE-2018-7820
CVE-2018-7820
Description
A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled.
Affected products
6- cpe:2.3:o:schneider-electric:ap9630_firmware:*:*:*:*:*:*:*:*Range: <6.7.2
- cpe:2.3:o:schneider-electric:ap9631_firmware:*:*:*:*:*:*:*:*Range: <6.7.2
- cpe:2.3:o:schneider-electric:ap9635_firmware:*:*:*:*:*:*:*:*Range: <6.7.2
- cpe:2.3:o:schneider-electric:smart-ups_srt_5kva_firmware:*:*:*:*:*:*:*:*Range: <6.7.2
- Range: = v6.5.6
- Schneider Electric SE/APC UPS Network Management Card 2 AOSv5Range: v6.5.6
Patches
Vulnerability mechanics
References
1- www.apc.com/salestools/CCON-BFQMXC/CCON-BFQMXC_R0_EN.pdfnvdVendor Advisory
News mentions
0No linked articles in our index yet.