VYPR
← All advisories
Medium severity4.9NVD Advisory· Published May 22, 2019· Updated Jun 17, 2026

CVE-2018-7824

CVE-2018-7824

Description

An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior) which could allow write access to system files available only to users with SYSTEM privilege or other important user files.

Affected products

4
  • Schneider Electric/Driver Suite
    cpe:2.3:a:schneider-electric:driver_suite:*:*:*:*:*:*:*:*
    Range: <=14.12
  • Schneider Electric/Modbus Serial Driver2 versions
    cpe:2.3:a:schneider-electric:modbus_serial_driver:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:schneider-electric:modbus_serial_driver:*:*:*:*:*:*:*:*range: <=3.17
    • (no CPE)range: For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior
  • Schneider/Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior)v5
    Range: Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.