CVE-2018-7522observed exploitationCWE-119

CVE-2018-7522: vulnerability in Schneider Electric Triconex Tricon

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

25Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 0.4%
from disclosure to weapon
Published on NVDMay 4
VulnCheck+230d
In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states.
Related CVEs — Schneider Electric Triconex Tricon

In the same product, most dangerous first.