Vulnerabilities > Schneider Electric > Modbus Serial Driver

DATE CVE VULNERABILITY TITLE RISK
2020-08-31 CVE-2020-7523 Unspecified vulnerability in Schneider-Electric Modbus Driver Suite and Modbus Serial Driver
Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked.
local
high complexity
schneider-electric
7.8
2019-05-22 CVE-2018-7824 Externally Controlled Reference to a Resource in Another Sphere vulnerability in Schneider-Electric Driver Suite and Modbus Serial Driver
An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior) which could allow write access to system files available only to users with SYSTEM privilege or other important user files.
network
low complexity
schneider-electric CWE-610
4.9