CVE-2018-7793

HIGH 8.7CVE-2018-7793 · Published 24/12/2018 · updated 17/06/2026

In short

CVE-2018-7793 is a HIGH (CVSS 8.7) vulnerability affecting foxboro dcs (schneider-electric), foxboro evo (schneider-electric), foxview (schneider-electric).
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 25.3% of all vulnerabilities.
Fix: update to ccs_9.4 or later.

Package	Affected versions	Patched versions
foxboro dcs schneider-electric	`< ccs_9.4`	`ccs_9.4`
foxboro evo schneider-electric	`< ccs_9.4`	`ccs_9.4`
foxview schneider-electric	`= 10.5`	No fix yet
ia series schneider-electric	`< ccs_9.4`	`ccs_9.4`

Description

A Credential Management vulnerability exists in FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 (CCS 9.4) and FoxView 10.5.) which could cause unauthorized disclosure, modification, or disruption in service when the password is modified without permission.

References

schneider-electric.com/en/download/document/SEVD-2018-353-03 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free