CVE-2018-8872

In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within the control program area without any verification. Manipulating this data could allow attacker data to be copied anywhere within memory.

Date published : 2018-05-04

http://www.securityfocus.com/bid/103947

https://www.schneider-electric.com/en/download/document/SEVD-2017-347-01/