CVEvulnerability

CVE-2018-7511

5.3 MEDIUM Published 2018-03-20 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2018-03-20
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 5.3 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS 2.0 ([email protected]): 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses: CWE-119, CWE-20

Description

In Eaton ELCSoft versions 2.04.02 and prior, there are multiple cases where specially crafted files could cause a buffer overflow which, in turn, may allow remote execution of arbitrary code.

Affected configurations

• eaton elcsoft (< 2.04.02)

Weakness · CWE (2)

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
CWE-20 Improper Input Validation weakness

References

http://www.eaton.com/ecm/idcplg?IdcService=GET_FILE&allowInterrupt=1&RevisionSelectionMethod=LatestReleased&noSaveAs=0&Rendition=Primary&dDocName=PCT_3313148 Vendor Advisory
http://www.securityfocus.com/bid/103301 Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-065-03 Third Party Advisory, US Government Resource
http://www.eaton.com/ecm/idcplg?IdcService=GET_FILE&allowInterrupt=1&RevisionSelectionMethod=LatestReleased&noSaveAs=0&Rendition=Primary&dDocName=PCT_3313148 Vendor Advisory
http://www.securityfocus.com/bid/103301 Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-065-03 Third Party Advisory, US Government Resource

CVE-2018-7511

Description

Affected configurations

Related

Weakness · CWE (2)

References