CVE-2018-7522
25Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendepss 0.4%
from disclosure to weapon
Published on NVDMay 4
VulnCheck+230d
exploitation probability
0.4%top 64% of all CVEs
observed exploitation
yesVulnCheck
In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states.
Affected products
Schneider Electric · Triconex Tricon