CVE-2018-7522

6.7 mediumEPSS 0.4%

Medium (6.7) in schneider-electric triconex tricon mp 3008 firmware. EPSS 0.4% chance of exploitation in the next 30 days.

In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states.

Severity

CVSS 3.0

6.7 medium

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2018-05-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

schneider-electric:triconex_tricon_mp_3008_firmware

References

http://www.securityfocus.com/bid/103947
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-02
https://www.schneider-electric.com/en/download/document/SEVD-2017-347-01/
http://www.securityfocus.com/bid/103947
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-02

Check your stack JSON