← Back

CVE-2018-7824

nvd nist
Published: May 22, 2019Modified: Nov 21, 2024

JSON object

Loading...
4.9
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Exploitability: 1.2 / Impact: 3.6
Source: NVD

Description

An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior) which could allow write access to system files available only to users with SYSTEM privilege or other important user files.

Affected (3)

Schneider Electric
2 products
Modbus Serial Driver
Driver Suite
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modbus Serial Driver
Up to 3.17
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modbus Serial Driver
Up to 2.17
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Driver Suite
Up to 14.12

Related CWEs

CWE-610
Externally Controlled Reference to a Resource in Another Sphere
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.

References (2)

Source: cybersecurity@se.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.