CVE-2018-7824

An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior) which could allow write access to system files available only to users with SYSTEM privilege or other important user files.

Score

CVSS 3.1 4.9 Medium

Status

Modified - cybersecurity@se.com

Published

2019-05-22

Last modified

2024-08-05

Weaknesses

CWE-610

Affected products

• And As Part Of The Driver Suite Versionv14.12 And Prior (Schneider)
• For 32-bit Windows Osv2.17 Ie 27 And Prior (Schneider)
• Schneider Electric Modbus Serial Driver For 64-bit Windows Osv3.17 Ie 37 And Prior (Schneider)
• Driver Suite (Schneider-electric)
• Modbus Serial Driver (Schneider-electric)

References

• https://www.schneider-electric.com/en/download/document/SEVD-2019-099-01/