Schneider Electric Triconex Tricon vulnerabilities

2 vulnerabilities

Known vulnerabilities in Schneider Electric Triconex Tricon, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2018-7522schneider electrictriconex tricon+1
EPSS score
0.42%
In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states.9.3CVE-2018-8872schneider electrictriconex tricon+1
EPSS score
2.20%
In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within the control program area without any verification. Manipulating this data could allow attacker data to be copied anywhere within memory.