Lucene search
+L

CVE-2018-7502

🗓️ 23 Mar 2018 17:00:00Reported by icscertType 
cve
 cve
🔗 web.nvd.nist.gov👁 110 Views🌐 WEB

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges

Related
Detection
Affected
Refs
Paths
NVD
[
  {
    "product": "Beckhoff TwinCAT PLC products",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, TwinCAT 3.1"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
IOCTL 0x00222206path\\.\TcAnalyticsUntrusted pointer dereference via IOCTL 0x00222206 in TcAnalytics driver (Beckhoff TwinCAT3 kernel driver vulnerability).CWE-20, CWE-822
IOCTL 0x00222206path\\.\TcCncUntrusted pointer dereference via IOCTL 0x00222206 in TcCnc driver (Beckhoff TwinCAT3 kernel driver vulnerability).CWE-20, CWE-822
IOCTL 0x00222206path\\.\TcIoBACnetR9Untrusted pointer dereference via IOCTL 0x00222206 in TcIoBACnetR9 driver (Beckhoff TwinCAT3 kernel driver vulnerability).CWE-20, CWE-822
IOCTL 0x00222206path\\.\TcIoCCatUntrusted pointer dereference via IOCTL 0x00222206 in TcIoCCat driver (Beckhoff TwinCAT3 kernel driver vulnerability).CWE-20, CWE-822
IOCTL 0x00222206path\\.\TcIoDriversUntrusted pointer dereference via IOCTL 0x00222206 in TcIoDrivers driver (Beckhoff TwinCAT3 kernel driver vulnerability).CWE-20, CWE-822
IOCTL 0x00222206path\\.\TcIoECatUntrusted pointer dereference via IOCTL 0x00222206 in TcIoECat driver (Beckhoff TwinCAT3 kernel driver vulnerability).CWE-20, CWE-822
IOCTL 0x00222206path\\.\TcIoECatSimuUntrusted pointer dereference via IOCTL 0x00222206 in TcIoECatSimu driver (Beckhoff TwinCAT3 kernel driver vulnerability).CWE-20, CWE-822
IOCTL 0x00222206path\\.\TcIoESlvUntrusted pointer dereference via IOCTL 0x00222206 in TcIoESlv driver (Beckhoff TwinCAT3 kernel driver vulnerability).CWE-20, CWE-822
IOCTL 0x00222206path\\.\TcIoEthUntrusted pointer dereference via IOCTL 0x00222206 in TcIoEth driver (Beckhoff TwinCAT3 kernel driver vulnerability).CWE-20, CWE-822
IOCTL 0x00222206path\\.\TcIoEthIpUntrusted pointer dereference via IOCTL 0x00222206 in TcIoEthIp driver (Beckhoff TwinCAT3 kernel driver vulnerability).CWE-20, CWE-822
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 02:03Current
7.4High risk
Vulners AI Score7.4
CVSS 27.2
CVSS 37.8
EPSS0.00557
110