CVE-2018-7502 Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target...
HighCVSS 7.8
EPSS 0.56%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| beckhoff twincat | = 2.11 | No fix listed |
| beckhoff twincat | = 3.1 | No fix listed |
| beckhoff twincat c++ | = 3.1 | No fix listed |
| ICS-CERT Beckhoff TwinCAT PLC products | = TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, TwinCAT 3.1 | No fix listed |
References
- 103487 third-party-advisory vdb-entry
- download.beckhoff.com vendor-advisory
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource
- srcincite.io