Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2018-8847

Quick assessment

Affected

ICS-CERT Eaton 9000X Drive

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Eaton 9000X DriveA是美国Eaton公司的一款变频器，它集成了数据记录器功能，可以同时监控多个驱动器。 Eaton 9000X DriveA 2.0.29及之前版本中存在基于栈的缓冲区溢出漏洞。远程攻击者可利用该漏洞执行代码。

AI Predicted 9.8 Difficulty: Easy EPSS 6.75% · P94 Updated Feb 21, 2026

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2018-8847

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

栈缓冲区溢出

Source: CVE Program / CVE List V5

Vulnerability Title

Eaton 9000X DriveA 缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
ICS-CERT	Eaton 9000X Drive	Versions 2.0.29 and prior	-

II. Public POCs for CVE-2018-8847

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2018-8847

请登录查看更多情报信息。

Vendor Advisories for CVE-2018-8847 (1)

http://www.securityfocus.com/bid/104736 vdb-entry x_refsource_BID

Other References for CVE-2018-8847 (2)

http://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton_9000X_Drive.pdf x_refsource_MISC
https://ics-cert.us-cert.gov/advisories/ICSA-18-193-01 x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2018-8847

IV. Related Vulnerabilities

Same vendor: ICS-CERT

Same weakness: CWE-121