CVE-2018-7522

In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states...

CVE-2018-7522

Schneider Electric Triconex Tricon MP Model 3008 (firmware versions 10.0-10.4) is vulnerable to a memory corruption issue where system calls store registers to a fixed memory location . Attackers who can modify the data in this location may gain supervisor-level access and control system states. ...

CVE-2018-7522

creationtimestamp| type| source ---|---|--- 2018-04-25 09:20:42+00:00| published-proof-of-concept| https://t.me/icscert/9...

Schneider Electric Triconex Tricon

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION : Exploitable remotely/HatMan malware specifically targets these vulnerabilities. Vendor : Schneider Electric Equipment : Triconex Tricon, Model 3008 Vulnerabilities : Improper Restriction of Operations within the Bounds of a Memory Buffer 2. UPDATE...