CVE-2018-8872: vulnerability in Schneider Electric Triconex Tricon
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
25Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendepss 2.2%
from disclosure to weapon
Published on NVDMay 4
VulnCheckJan 12
In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within the control program area without any verification. Manipulating this data could allow attacker data to be copied anywhere within memory.
Affected products
Schneider Electric · Triconex TriconRelated CVEs — Schneider Electric Triconex Tricon
In the same product, most dangerous first.