CVE-2018-7793
High
Description
A Credential Management vulnerability exists in FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 (CCS 9.4) and FoxView 10.5.) which could cause unauthorized disclosure, modification, or disruption in service when the password is modified without permission.
SeverityHigh
CVSS8.7
Exploit probability—
ProductSchneider-electric Foxboro Dcs
PublishedDec 24, 2018
First seenDec 24, 2018
How to fix
Update
- schneider-electric foxboro_dcsccs_9.4 or later
- schneider-electric foxboro_evoccs_9.4 or later
- schneider-electric ia_seriesccs_9.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric foxboro_dcs | v < ccs_9.4 | ccs_9.4 |
| schneider-electric foxboro_evo | v < ccs_9.4 | ccs_9.4 |
| schneider-electric foxview | 10.5 | — |
| schneider-electric ia_series | v < ccs_9.4 | ccs_9.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.