High severity8.1NVD Advisory· Published May 4, 2018· Updated Jun 17, 2026

CVE-2018-8872

Description

In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within the control program area without any verification. Manipulating this data could allow attacker data to be copied anywhere within memory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Schneider Electric/Triconex Tricon MP model 3008llm-create
Range: 10.0-10.4
Schneider Electric/Triconex Tricon MPcpe-rescue
Range: MP model 3008 firmware versions 10.0-10.4

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/103947nvdThird Party AdvisoryVDB Entry
ics-cert.us-cert.gov/advisories/ICSA-18-107-02nvdThird Party AdvisoryUS Government Resource
www.schneider-electric.com/en/download/document/SEVD-2017-347-01/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000