CVE-2018-7793
Quick assessment
Affected
Schneider Electric SE FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 (CCS 9.4) and FoxView 10.5.)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
多款Schneider Electric产品中存在信任管理问题漏洞。攻击者可利用该漏洞未授权泄露信息、进行修改操作或中断服务。以下产品及版本受到影响：Schneider Electric Foxboro DCS ccs_9.4之前版本；Foxboro Evo ccs_9.4之前版本；FoxView 10.5版本；IA Series ccs_9.4之前版本。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2018-7793
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A Credential Management vulnerability exists in FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 (CCS 9.4) and FoxView 10.5.) which could cause unauthorized disclosure, modification, or disruption in service when the password is modified without permission.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款Schneider Electric产品信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
多款Schneider Electric产品中存在信任管理问题漏洞。攻击者可利用该漏洞未授权泄露信息、进行修改操作或中断服务。以下产品及版本受到影响：Schneider Electric Foxboro DCS ccs_9.4之前版本；Foxboro Evo ccs_9.4之前版本；FoxView 10.5版本；IA Series ccs_9.4之前版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Schneider Electric SE | FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 (CCS 9.4) and FoxView 10.5.) | FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 (CCS 9.4) and FoxView 10.5.) | - |
|
II. Public POCs for CVE-2018-7793
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-7793
请登录查看更多情报信息。
Other References for CVE-2018-7793 (1)
-
https://www.schneider-electric.com/en/download/document/SEVD-2018-353-03/ x_refsource_CONFIRM
Same Patch Batch · Schneider Electric SE · 2018-12-24 · 9 CVEs total
| CVE-2018-7796 | Schneider Electric PowerSuite 2 缓冲区错误漏洞 | |
| CVE-2018-7800 | Schneider Electric EVLink Parking 安全漏洞 | |
| CVE-2018-7801 | Schneider Electric EVLink Parking 代码注入漏洞 | |
| CVE-2018-7802 | Schneider Electric EVLink Parking SQL注入漏洞 | |
| CVE-2018-7832 | Schneider Electric Pro-Face GP-Pro EX 输入验证漏洞 | |
| CVE-2018-7835 | Schneider Electric IIoT Monitor 路径遍历漏洞 | |
| CVE-2018-7836 | Schneider Electric IIoT Monitor 安全漏洞 | |
| CVE-2018-7837 | Schneider Electric IIoT Monitor 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2018-7793
No comments yet