CVE-2018-7522

Опубликовано: 04 мая 2018

Источник: nvd

CVSS3: 6.7

CVSS2: 7.2

EPSS Низкий

Описание

In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states.

Ссылки

http://www.securityfocus.com/bid/103947
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-02
Third Party Advisory
US Government Resource
https://www.schneider-electric.com/en/download/document/SEVD-2017-347-01/
Vendor Advisory
http://www.securityfocus.com/bid/103947
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-02
Third Party Advisory
US Government Resource
https://www.schneider-electric.com/en/download/document/SEVD-2017-347-01/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:schneider-electric:triconex_tricon_mp_3008_firmware:*:*:*:*:*:*:*:*

Версия от 10.0 (включая) до 10.0-10.4 (включая)

cpe:2.3:h:schneider-electric:triconex_tricon_mp_3008:-:*:*:*:*:*:*:*

EPSS

Процентиль: 21%

0.00067

Низкий

6.7 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-119

NVD-CWE-noinfo

Связанные уязвимости

GHSA-293h-57f9-wc4c