Trust boundary violation in Schneider Electric products - CVE-2018-7846

The vulnerability allows a remote attacker to gain unauthorized access to the target system.

The vulnerability exists on connection to the Controller due to the affected product mixes trusted and untrusted data in the same data structure or structured message. A remote attacker can conduct a brute force attack on Modbus protocol to the controller and gain unauthorized access to the target system.