CVE-2018-7824

MEDIUM Year: 2018
CVSS v3 Score
4.9
Medium
CVSS v2 Score
6.8
Medium
Weakness Type
CWE-610
View all →

Vulnerability Description

An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior) which could allow write access to system files available only to users with SYSTEM privilege or other important user files.

Related Vulnerabilities

CVE-2023-38046

MEDIUM
CVSS:4.9(Medium)

A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resou...

CWE-6102023

CVE-2018-12381

MEDIUM
CVSS:5.3(Medium)

Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. *Note: this issue only aff...

CWE-6102018

CVE-2021-26711

MEDIUM
CVSS:5.3(Medium)

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/Online_Help/NetHelp/default.htm turl paramet...

CWE-6102021

CVE-2021-29965

MEDIUM
CVSS:5.3(Medium)

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that ...

CWE-6102021

CVE-2021-43794

MEDIUM
CVSS:5.3(Medium)

Discourse is an open source discussion platform. In affected versions an attacker can poison the cache for anonymous (i.e. not logged in) users, such that the users are shown a JSON blob instead of th...

CWE-6102021

CVE-2022-43423

MEDIUM
CVSS:5.3(Medium)

Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able...

CWE-6102022