What is CVE-2018-7803?

CVE-2018-7803 is a medium-severity vulnerability in Schneider-Electric Triconex Tristation Emulator, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 5.9/10. Published 2019-05-22.

How severe is CVE-2018-7803?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Schneider-Electric Triconex Tristation Emulator

CVE-2018-7803

A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TriStation Emulator V1.2.0, which could cause the emulator to crash when sending a specially crafted packet. The emulator is used infrequently for application logic testing. It is susceptible to an attack only while running in off-line mode. This vulnerability does not exist in Triconex hardware products and therefore has no effect on the operating safety functions in a plant.

EPSS: 0.011 (63.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Schneider-electric Triconex_tristation_emulator — versions 1.2.0
N/a Triconex Tristation Emulator V1.2.0 — versions Triconex TriStation Emulator V1.2.0

Weakness classification (CWE)

CWE-754 — Improper Check for Unusual or Exceptional Conditions

References

cybersecurity@se.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2018-7803?: CVE-2018-7803 is a medium-severity vulnerability in Schneider-Electric Triconex Tristation Emulator, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 5.9/10. Published 2019-05-22.
How severe is CVE-2018-7803?: Medium severity. CVSS v3 base score is 5.9 out of 10.