PT-2019-11102 · Triconex · Triconex Tristation Emulator

Published 2019-05-22 · Updated 2020-08-24 · CVE-2018-7803

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Triconex TriStation Emulator version 1.2.0

Description: A vulnerability exists due to improper check for unusual or exceptional conditions, which could cause the emulator to crash when sending a specially crafted packet. The emulator is used infrequently for application logic testing and is susceptible to an attack only while running in off-line mode.

Recommendations: For Triconex TriStation Emulator version 1.2.0, consider disabling the emulator when not in use, especially when in off-line mode, to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2018-7803

Affected Products

Triconex Tristation Emulator

References · 3

• https://schneider-electric.com/ww/en/download/document/SEVD-2019-071-03 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-7803 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7803 · Security Note