Lucene search

IcscertCVE-2018-7502

HistoryMar 23, 2018 - 5:29 p.m.

CVE-2018-7502

2018-03-2317:29:00

CWE-822

CWE-20

icscert

web.nvd.nist.gov

cve-2018-7502

beckhoff twincat

kernel drivers

code execution

privilege escalation

vulnerability

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

31.6%

JSON

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges.

Affected configurations

Nvd

Node

beckhofftwincatMatch2.11

beckhofftwincatMatch3.1

beckhofftwincat_c\+\+Match3.1

VendorProductVersionCPE
beckhofftwincat2.11cpe:2.3:a:beckhoff:twincat:2.11:*:*:*:*:*:*:*
beckhofftwincat3.1cpe:2.3:a:beckhoff:twincat:3.1:*:*:*:*:*:*:*
beckhofftwincat_c\+\+3.1cpe:2.3:a:beckhoff:twincat_c\+\+:3.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
beckhoff	twincat	2.11	cpe:2.3:a:beckhoff:twincat:2.11:::::::*
beckhoff	twincat	3.1	cpe:2.3:a:beckhoff:twincat:3.1:::::::*
beckhoff	twincat_c\+\+	3.1	cpe:2.3:a:beckhoff:twincat_c\+\+:3.1:::::::*

CNA Affected

[
  {
    "product": "Beckhoff TwinCAT PLC products",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, TwinCAT 3.1"
      }
    ]
  }
]

References

www.securityfocus.com/bid/103487

download.beckhoff.com/download/Document/product-security/Advisories/advisory-2018-001.pdf

ics-cert.us-cert.gov/advisories/ICSA-18-081-02

srcincite.io/advisories/src-2018-0007/

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

31.6%

JSON

Related for CVE-2018-7502