CVE-2018-7824
Medium
Description
An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior) which could allow write access to system files available only to users with SYSTEM privilege or other important user files.
SeverityMedium
CVSS4.9
Exploit probability—
ProductSchneider-electric Modbus Serial Driver
PublishedMay 22, 2019
First seenMay 22, 2019
Weakness typeCWE-610CWE-610
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric modbus_serial_driver | v ≤ 3.17, v ≤ 2.17 | — |
| schneider-electric driver_suite | v ≤ 14.12 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.