CVE-2018-8847

Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-07-13

Last modified

2024-09-16

Weaknesses

CWE-121, CWE-787

Affected products

• 9000x Firmware (Eaton)
• Eaton 9000x Drive (Ics-cert)

References

• http://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton_9000X_Drive.pdf
• http://www.securityfocus.com/bid/104736
• https://ics-cert.us-cert.gov/advisories/ICSA-18-193-01