High ICSA-21-070-01 4 CVEs

Schneider Electric IGSS SCADA Software

Published Mar 11, 2021 · Updated Mar 11, 2021

Vendor: Schneider Electric Product: IGSS Definition (Def.exe)

Summary

Successful exploitation of these vulnerabilities could result in remote code execution.

Vulnerabilities 4

Unscored —

CVE-2021-22709

A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive G…

Mar 11, 2021
Unscored —

CVE-2021-22710

A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive G…

Mar 11, 2021
Unscored —

CVE-2021-22711

A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive G…

Mar 11, 2021
Unscored —

CVE-2021-22712

A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive G…

Mar 11, 2021

Revision history

2021-03-11 #1
ICSA-21-070-01 Schneider Electric IGSS SCADA Software

References

ICS Advisory ICSA-21-070-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-070-01
Recommended Practices
https://us-cert.cisa.gov/ncas/tips/ST04-014
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B