IM
IronMonkey Threat Research

CVE-2018-7796 MEDIUM

Published: 2018-12-24 | Last Modified: 2026-06-17 | Status: Modified

Description

A Buffer Error vulnerability exists in PowerSuite 2, all released versions (VW3A8104 & Patches), which could cause an overflow in the memcpy function, leading to corruption of data and program instability.

Additional Descriptions (1)

Existe una vulnerabilidad de error en el búfer en PowerSuite 2, en todas las versiones publicadas (parches VW3A8104) que podría provocar un desbordamiento en la función memcpy, lo que conduce a la corrupción de los datos y a la inestabilidad del programa.

CVSS Metrics

Base Score: 6.8 (MEDIUM)

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access VectorNETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 6.4

Weaknesses

Source Type Description
[email protected] Primary
en CWE-119

Affected Products

Vendor Product Version Update Type
schneider-electric powersuite_2 * <built-in method update of dict object at 0x7e60b8100bc0> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:schneider-electric:powersuite_2:*:*:*:*:*:*:*:*
Notification
Message here