1. Home
  2. CVE Database
  3. CVE-2018-7824
MEDIUM · 4.9

CVE-2018-7824

An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE...

Vulnerability Description

An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior) which could allow write access to system files available only to users with SYSTEM privilege or other important user files.

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
Schneider-ElectricModbus Serial Driver<= 3.17
MicrosoftWindows-
Schneider-ElectricDriver Suite<= 14.12

Related Weaknesses (CWE)

CWE-610

References

FAQ

What is CVE-2018-7824?

CVE-2018-7824 is a vulnerability with a CVSS score of 4.9 (MEDIUM). An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE...

How severe is CVE-2018-7824?

CVE-2018-7824 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-7824?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Modbus Serial Driver, Microsoft Windows, Schneider-Electric Driver Suite.