PT-2018-18127

Name of the Vulnerable Software and Affected Versions Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0 through 10.4 Description The issue allows attackers to potentially gain supervisor-level access and control system states by modifying data in a fixed memory location wher...

Schneider Electric Triconex Tricon

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION : Exploitable remotely/HatMan malware specifically targets these vulnerabilities. Vendor : Schneider Electric Equipment : Triconex Tricon, Model 3008 Vulnerabilities : Improper Restriction of Operations within the Bounds of a Memory Buffer 2. UPDATE...