CVE-2018-8872

CVE-2018-8872 affects Schneider Electric Triconex Tricon MP model 3008 firmware 10.0–10.4. The root cause is improper restriction of operations within the bounds of a memory buffer: system calls read directly from memory addresses in the control program area without verification, enabling data to...

Schneider Electric Triconex Tricon

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION : Exploitable remotely/HatMan malware specifically targets these vulnerabilities. Vendor : Schneider Electric Equipment : Triconex Tricon, Model 3008 Vulnerabilities : Improper Restriction of Operations within the Bounds of a Memory Buffer 2. UPDATE...