What’s Vulnerable › Vulnerabilities

CVE-2018-7824

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-22 · updated 2026-06-17
• Weakness: CWE-610

Description

An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior) which could allow write access to system files available only to users with SYSTEM privilege or other important user files.

Affected products

• Schneider-Electric Driver Suite: through 14.12
• Schneider-Electric Modbus Serial Driver: through 3.17; through 2.17

References

• https://www.schneider-electric.com/en/download/document/SEVD-2019-099-01/
• https://www.schneider-electric.com/en/download/document/SEVD-2019-099-01/

Get alerted when CVE-2018-7824 or the next vulnerability affects your stack