CVEvulnerability

CVE-2018-7793

8.7 HIGH Published 2018-12-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-12-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.7 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

A Credential Management vulnerability exists in FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 (CCS 9.4) and FoxView 10.5.) which could cause unauthorized disclosure, modification, or disruption in service when the password is modified without permission.

Affected configurations

• schneider-electric foxboro dcs (< ccs 9.4) • schneider-electric foxboro evo (< ccs 9.4) • schneider-electric foxview 10.5 • schneider-electric ia series (< ccs 9.4)

References