description: In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, system calls read directly from memory addresses within the control program area without any verification. Manipulating this data could allow attacker data to be copied anywhere within memory.
problem types: Improper Restriction Of Operations Within The Bounds Of A Memory Buffer CWE-119
affected:
{
product: Triconex Tricon
vendor: Schneider Electric
versions:
status: affected, version: MP model 3008 firmware versions 10.0-10.4
}