Lucene search
K

CVE-2018-7502

🗓️ 23 Mar 2018 17:00:00Reported by icscertType 
cve
 cve
🔗 web.nvd.nist.gov👁 69 Views🌐 WEB

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges

Related
Detection
Affected
Refs
Paths
NVD
Vulners
Node
[
  {
    "product": "Beckhoff TwinCAT PLC products",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, TwinCAT 3.1"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
IOCTL_0x00222206path\\.\TcAnalyticsUntrusted pointer dereference in IOCTL 0x00222206 for TcAnalytics.sysCWE-822
IOCTL_0x00222206path\\.\TcCncUntrusted pointer dereference in IOCTL 0x00222206 for TcCnc.sysCWE-822
IOCTL_0x00222206path\\.\TcIoBACnetR9Untrusted pointer dereference in IOCTL 0x00222206 for TcIoBACnetR9.sysCWE-822
IOCTL_0x00222206path\\.\TcIoCCatUntrusted pointer dereference in IOCTL 0x00222206 for TcIoCCat.sysCWE-822
IOCTL_0x00222206path\\.\TcIoDriversUntrusted pointer dereference in IOCTL 0x00222206 for TcIoDrivers.sysCWE-822
IOCTL_0x00222206path\\.\TcIoECatUntrusted pointer dereference in IOCTL 0x00222206 for TcIoECat.sysCWE-822
IOCTL_0x00222206path\\.\TcIoECatSimuUntrusted pointer dereference in IOCTL 0x00222206 for TcIoECatSimu.sysCWE-822
IOCTL_0x00222206path\\.\TcIoESlvUntrusted pointer dereference in IOCTL 0x00222206 for TcIoESlv.sysCWE-822
IOCTL_0x00222206path\\.\TcIoEthUntrusted pointer dereference in IOCTL 0x00222206 for TcIoEth.sysCWE-822
IOCTL_0x00222206path\\.\TcIoEthIpUntrusted pointer dereference in IOCTL 0x00222206 for TcIoEthIp.sysCWE-822
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 04:12Current
7.4High risk
Vulners AI Score7.4
CVSS 27.2
CVSS 37.8
EPSS0.00172
69