CVE:CVE-2018-7797
CNNVD:CNNVD-201812-766
Schneider Electric EcoStruxure Power Monitoring Expert（PME）等都是法国施耐德电气（Schneider Electric）公司的电源监测管理系统。
多款Schneider Electric产品中存在安全漏洞。攻击者可利用该漏洞重定向用户至恶意网站，进而执行钓鱼攻击。以下产品和版本受到影响：Schneider Electric EcoStruxure Power Monitoring Expert（PME）8.2版本；EcoStruxure Energy Expert 1.3版本；EcoStruxure Power SCADA Operation（PSO）8.2版本（Advanced Reports and Dashboards模块）；EcoStruxure Power Monitoring Expert（PME）9.0版本；EcoStruxure Energy Expert 2.0版本；EcoStruxure Power SCADA Operation（PSO）9.0版本（Advanced Reports and Dashboards模块）。
solution:Upgrade schneider-electric ecostruxure_energy_expert to a higher version than 1.3,2.0,and avoid the version 1.3,2.0; Upgrade schneider-electric ecostruxure_power_monitoring_expert to a higher version than 8.2,9.0,and avoid the version 8.2,9.0; Upgrade schneider-electric ecostruxure_power_scada_operation to a higher version than 8.2,9.0,and avoid the version 8.2,9.0