CVE-2018-7814 — Out-of-bounds Write in Electric SE Eurotherm BY Schneider Electric Guicon V2.0

CWE-787 — Out-of-bounds Write3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 52.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Schneider Electric SE Eurotherm BY Schneider Electric Guicon V2.0Schneider-electric Guicon
Timeline
PublishedFeb 6
Latest updateMay 13

Description

A Stack-based Buffer Overflow (CWE-121) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) which could cause remote code to be executed when parsing a GD1 file

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5schneider_electric_se/eurotherm_by_schneider_electric_guicon_v2.0Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0)

🔴Vulnerability Details

2
GHSA
GHSA-348q-695g-g2w8: A Stack-based Buffer Overflow (CWE-121) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2↗2022-05-13
▶
CVEList
CVE-2018-7814: A Stack-based Buffer Overflow (CWE-121) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2↗2019-02-06
▶
CVE-2018-7814 — Out-of-bounds Write | cvebase