CVE-2018-7522

2018-04-1700:00:00

CWE-119

icscert

www.cve.org

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

23.3%

JSON

In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states.

CNA Affected

[
  {
    "product": "Triconex Tricon",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "MP model 3008 firmware versions 10.0-10.4"
      }
    ]
  }
]