CVE-2018-8872

Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4 is vulnerable to a design flaw where system calls read directly from memory addresses within the control program area without verification or authentication. This improper restriction of operations within the bounds of a...

Schneider Electric Triconex Tricon

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION : Exploitable remotely/HatMan malware specifically targets these vulnerabilities. Vendor : Schneider Electric Equipment : Triconex Tricon, Model 3008 Vulnerabilities : Improper Restriction of Operations within the Bounds of a Memory Buffer 2. UPDATE...