CVE-2018-8872: CVE-2018-8872

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2018-8872

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within the control program area without any verification. Manipulating this data could allow attacker data to be copied anywhere within memory.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

内存缓冲区边界内操作的限制不恰当

Source: NVD (National Vulnerability Database)

Vulnerability Title

Schneider Electric Triconex Tricon MP 3008 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Schneider Electric Triconex Tricon MP 3008是法国施耐德电气（Schneider Electric）公司的一款安全控制器产品。使用10.0版本至10.4版本固件的Schneider Electric Triconex Tricon MP 3008中存在安全漏洞。攻击者可利用该漏洞将他的数据复制到内存中的任意位置。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Schneider Electric	Triconex Tricon	MP model 3008 firmware versions 10.0-10.4	-

II. Public POCs for CVE-2018-8872

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2018-8872

Please Login to view more intelligence information

https://ics-cert.us-cert.gov/advisories/ICSA-18-107-02x_refsource_MISC
https://www.schneider-electric.com/en/download/document/SEVD-2017-347-01/x_refsource_CONFIRM
http://www.securityfocus.com/bid/103947vdb-entryx_refsource_BID
https://nvd.nist.gov/vuln/detail/CVE-2018-8872

IV. Related Vulnerabilities

Same product: Triconex Tricon

CVE-2018-7522
Schneider Electric Triconex Tricon MP 3008 安全漏洞

Same vendor: Schneider Electric

Same weakness: CWE-119

V. Comments for CVE-2018-8872

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2018-8872

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2018-8872

III. Intelligence Information for CVE-2018-8872

IV. Related Vulnerabilities

V. Comments for CVE-2018-8872

Leave a comment