CVE-2018-7815 — Incorrect Type Conversion or Cast in Electric SE Eurotherm BY Schneider Electric Guicon V2.0

CWE-704 — Incorrect Type Conversion or Cast3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 59.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Schneider Electric SE Eurotherm BY Schneider Electric Guicon V2.0Schneider-electric Guicon
Timeline
PublishedFeb 6
Latest updateMay 14

Description

A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) on c3core.dll which could cause remote code to be executed when parsing a GD1 file

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5schneider_electric_se/eurotherm_by_schneider_electric_guicon_v2.0Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0)

🔴Vulnerability Details

2
GHSA
GHSA-pgm3-h7vv-wjcf: A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2↗2022-05-14
▶
CVEList
CVE-2018-7815: A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2↗2019-02-06
▶
CVE-2018-7815 — Incorrect Type Conversion or Cast | cvebase