CVE-2018-7243

CVE-2018-7243 is a critical authorization bypass vulnerability affecting Schneider Electric's 66074 MGE Network Management Card Transverse, found in MGE UPS and STS devices. A remote attacker can exploit the integrated web server (ports 80/443/TCP) to gain full access to the device, bypassing authentication. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness.