PT-2018-18284 · Foxboro · Foxboro Dcs Control Core Services+2

Published 2018-12-24 · Updated 2020-08-24 · CVE-2018-7793

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions: FoxView HMI SCADA versions prior to Foxboro DCS Control Core Services 9.4 and FoxView 10.5

Description: A Credential Management issue exists that could lead to unauthorized disclosure, modification, or disruption in service when the password is modified without permission.

Recommendations: For versions prior to Foxboro DCS Control Core Services 9.4 and FoxView 10.5, update to Foxboro DCS Control Core Services 9.4 or FoxView 10.5 to resolve the issue.

Fix

Related Identifiers

CVE-2018-7793

Affected Products

Foxview

Foxview Hmi Scada

Foxboro Dcs Control Core Services

References · 3

• https://osv.dev/vulnerability/CVE-2018-7793 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7793 · Security Note
• https://schneider-electric.com/en/download/document/SEVD-2018-353-03 · Vendor Advisory