{"cvss":0.0,"datePublished":"2018-01-12T00:00:00Z","dateUpdated":"2018-01-12T00:00:00Z","description":"In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within the control program area without any verification. Manipulating this data could allow attacker data to be copied anywhere within memory.","dueDate":"","id":"CVE-2018-8872","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"triconex_tricon_mp_3008_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Schneider Electric triconex_tricon_mp_3008_firmware Improper Restriction of Operations within the Bounds of a Memory Buffer","vendor":"Schneider Electric"}