CVE-2018-7502CWE-822

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values

published March 23, 2018

CVSS
—
EPSS
1%
Percentile
45.6
In the wild
Unconfirmed
What it is

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00557 · 45.6th percentile
Weakness
CWE-822 · Untrusted Pointer Dereference
Published
2018-03-23T17:00Z
EPSS history
Timeline
  • 23 MAR 17:00Z
    Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values
    cvelistv5