PT-2018-2656 · Beckhoff · Twincat

Mr_Me + 1 · Published 2018-03-13 · Updated 2018-05-23 · CVE-2018-7502

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TwinCAT versions 2.11 R3 2259 through 3.1 Build 4022.4

Description The issue is related to insufficient validation of user-supplied input in kernel drivers, which could allow an attacker to exploit this and potentially gain SYSTEM privileges. This could lead to privilege escalation.

Recommendations For TwinCAT versions 2.11 R3 2259 through 3.1 Build 4022.4, consider restricting access to the kernel drivers until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Untrusted Pointer Dereference

Weakness Enumeration

CWE-20

CWE-822

Related Identifiers

BDU:2019-01278

CVE-2018-7502

Affected Products

Twincat

References · 8

• https://osv.dev/vulnerability/CVE-2018-7502 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7502 · Security Note
• https://bdu.fstec.ru/vul/2019-01278 · Security Note
• https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2018-001.pdf · Vendor Advisory
• https://vuldb.com/?id.114964 · Note
• http://securityfocus.com/bid/103487 · Note
• https://srcincite.io/advisories/src-2018-0007 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-081-02 · Note