CVE-2018-7824: schneider-electric driver_suite
Vulnerability summary
CVE-2018-7824 is a medium (CVSS 6.8) vulnerability in schneider-electric driver_suite. EPSS estimates a 0.88% chance of exploitation in the next 30 days, higher than 58.3% of scored vulnerabilities.
Timeline
- 22-05-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior) which could allow write access to system files available only to users with SYSTEM privilege or other important user files.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.88%
Chance of exploitation in the next 30 days
Percentile
58%
Versus all other CVEs
30-day change
0.00 pp
From 0.88% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Schneider-electric2 products
- driver_suite≤ 14.12
- modbus_serial_driver≤ 3.17 | ≤ 2.17
Schneider1 product
- schneider electric modbus serial driver (for 64-bit windows os:v3.17 ie 37 and prior , for 32-bit windows os:v2.17 ie 27 and prior, and as part of the driver suite version:v14.12 and prior)Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior | For 32-bit Windows OS:V2.17 IE 27 and prior | and as part of the Driver Suite version:V14.12 and prior)
2 vendors · 3 products
References
1 links- www.schneider-electric.com/en/download/document/SEVD-2019-099-01/X Refsource CONFIRMPatchVendor Advisory