CVE-2018-7502: beckhoff twincat Untrusted Pointer Dereference
CVSS: 7.8v3.0HighModified
Published 23-03-2018Last modified 16-09-2024
Vulnerability summary
CVE-2018-7502 is a high (CVSS 7.8) Untrusted Pointer Dereference vulnerability in beckhoff twincat. EPSS estimates a 0.56% chance of exploitation in the next 30 days, higher than 45.5% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.0 (NVD)EPSS score
0.56%
0%100%
Low · -0.02 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 0 · Duplicates 19Timeline
- 23-03-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges.
CVSS metrics
2 scores · 1 source · 2 versionsHigh 7.8Preferred score · NVD (NIST)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesSingle source
High 7.2Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
0.56%
Chance of exploitation in the next 30 days
Percentile
46%
Versus all other CVEs
30-day change
-0.02 pp
From 0.58% on 21-09-2026
21-09-202621-10-2026
EPSS score0.56%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-822Untrusted Pointer DereferenceThe product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
- CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Affected systems
Beckhoff2 products
- twincat2.11 | 3.1
- twincat_c\+\+3.1
Ics-cert1 product
- beckhoff twincat plc productsTwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, TwinCAT 3.1
2 vendors · 3 products
References
4 links- srcincite.io/advisories/src-2018-0007/X Refsource MISC
- ics-cert.us-cert.gov/advisories/ICSA-18-081-02X Refsource MISCMitigationThird Party AdvisoryUS Government Resource
- download.beckhoff.com/download/Document/product-security/Advisories/advisory-2018-001.pdfX Refsource CONFIRMVendor Advisory