What is CVE-2018-7797?

CVE-2018-7797 is a medium-severity vulnerability in Schneider-Electric Ecostruxure Energy Expert, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 6.1/10. Published 2018-12-17.

How severe is CVE-2018-7797?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Open Redirect in Schneider-Electric Ecostruxure Energy Expert

CVE-2018-7797

A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure Energy Expert 1.3 (formerly Power Manager), EcoStruxure Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxure Power Monitoring Expert (PME) v9.0, EcoStruxure Energy Expert v2.0, and EcoStruxure Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module which could cause a phishing attack when redirected to a malicious site.

Vulnerability class: Open Redirect

Published 2018-12-17 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

EPSS exploit prediction

EPSS: 0.008 (53.3th percentile), scored 2026-09-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 53rd percentile — 53.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000

Affected products

Schneider-Electric Ecostruxure Energy Expert — versions 1.3, 2.0
Schneider-Electric Ecostruxure Power Monitoring Expert — versions 8.2, 9.0
Schneider-Electric Ecostruxure Power Scada Operation — versions 8.2, 9.0
Schneider Electric Se Power Monitoring Expert, Energy Expert (Formerly Manager) - Ecostruxureª (Pme) V8.2 (All Editions), 1.3 Manager), Scada Operation (Pso) 8.2 Advanced Reports And Dashboards Module, V9.0, V2.0, Ecostruxureªpower 9.0 Module — versions EcoStruxure&#xaa, Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure&#xaa, Energy Expert 1.3 (formerly Power Manager), EcoStruxure&#xaa

Weakness classification (CWE)

CWE-601 — URL Redirection to Untrusted Site (Open Redirect)

References

www.securityfocus.com/bid/106277 (VDB Entry, Third Party Advisory, vdb-entry)
www.schneider-electric.com/en/download/document/SEVD-2018-347-01/ (Vendor Advisory)

Frequently asked questions

What is CVE-2018-7797?: CVE-2018-7797 is a medium-severity vulnerability in Schneider-Electric Ecostruxure Energy Expert, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 6.1/10. Published 2018-12-17.
How severe is CVE-2018-7797?: Medium severity. CVSS v3 base score is 6.1 out of 10.