Skip to content
OpenAdvisories
High ICSA-20-084-02 2 CVEs

Schneider Electric IGSS SCADA Software

Published Mar 24, 2020 · Updated Mar 24, 2020

Vendor: Schneider Electric Product: IGSS (Interactive Graphical SCADA System)

Summary

Successful exploitation of these vulnerabilities could result in unauthorized access to sensitive data and functions.

Vulnerabilities 2

  • Unscored —
    CVE-2020-7478

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS (Versions 14 and prior using the s…

  • Unscored —
    CVE-2020-7479

    A CWE-306: Missing Authentication for Critical Function vulnerability exists in IGSS (Versions 14 and prior using the s…

Revision history

  1. #1

    ICSA-20-084-02 Schneider Electric IGSS

References