In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states.
[
{
"product": "Triconex Tricon",
"vendor": "Schneider Electric",
"versions": [
{
"status": "affected",
"version": "MP model 3008 firmware versions 10.0-10.4"
}
]
}
]