Unrestricted File Upload Vulnerability in IIoT Monitor Software by Schneider Electric
CVE-2018-7836

9.8CRITICAL

Key Information:

Vendor

Schneider Electric
Status
Iiot Monitor 3.1.38
Vendor
CVE Published:
24 December 2018

What is CVE-2018-7836?

An unrestricted file upload vulnerability in Schneider Electric's IIoT Monitor 3.1.38 allows attackers to upload and execute dangerous files, potentially compromising the system. This vulnerability exists in multiple methods of the software, posing significant risks to data integrity and system security. Users are advised to assess their environments and apply mitigating controls.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

IIoT Monitor 3.1.38 IIoT Monitor 3.1.38

References

http://www.securityfocus.com/bid/106484
vdb-entryx_refsource_BID
https://www.schneider-electric.com/en/download/document/S...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.