CVE-2018-7502

https://notcve.org/view.php?id=CVE-2018-7502

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges. Los controladores del kernel en Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259 y TwinCAT 3.1 no validan correctamente los valores de puntero proporcionados por el usuario. Un atacante que pueda ejecutar código en el objetivo podría explotar esta vulnerabilidad para obtener privilegios SYSTEM. • http://www.securityfocus.com/bid/103487 https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2018-001.pdf https://ics-cert.us-cert.gov/advisories/ICSA-18-081-02 https://srcincite.io/advisories/src-2018-0007 • CWE-20: Improper Input Validation CWE-822: Untrusted Pointer Dereference •