High severity7.8NVD Advisory· Published Mar 23, 2018· Updated Jun 17, 2026

CVE-2018-7502

Description

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Beckhoff/Twincat3 versions
cpe:2.3:a:beckhoff:twincat:2.11:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:beckhoff:twincat:2.11:*:*:*:*:*:*:*
- cpe:2.3:a:beckhoff:twincat:3.1:*:*:*:*:*:*:*
- (no CPE)range: 3.1 Build 4022.4, 2.11 R3 2259, 3.1
Beckhoff/Twincat C\+\+
cpe:2.3:a:beckhoff:twincat_c\+\+:3.1:*:*:*:*:*:*:*
ICS-CERT/Beckhoff TwinCAT PLC productsv5
Range: TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, TwinCAT 3.1

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/103487nvdThird Party AdvisoryVDB Entry
download.beckhoff.com/download/Document/product-security/Advisories/advisory-2018-001.pdfnvdVendor Advisory
ics-cert.us-cert.gov/advisories/ICSA-18-081-02nvdMitigationThird Party AdvisoryUS Government Resource
srcincite.io/advisories/src-2018-0007/nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000