Skip to content
OpenAdvisories
High ICSA-21-159-04 13 CVEs

Schneider Electric IGSS

Published Jun 8, 2021 · Updated Jun 8, 2021

Vendor: Schneider Electric Product: IGSS Definition (Def.exe)

Summary

Successful exploitation of these vulnerabilities may result in remote code execution, which could result in an attacker gaining access to the Windows Operating System on the machine used to import CGF and WSP files.

Vulnerabilities 13

  • Unscored —
    CVE-2021-22750

    A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21041 and prior that could resu…

  • Unscored —
    CVE-2021-22751

    A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resu…

  • Unscored —
    CVE-2021-22752

    A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resu…

  • Unscored —
    CVE-2021-22753

    A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resul…

  • Unscored —
    CVE-2021-22754

    A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resu…

  • Unscored —
    CVE-2021-22755

    A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resu…

  • Unscored —
    CVE-2021-22756

    A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resul…

  • Unscored —
    CVE-2021-22757

    A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resul…

  • Unscored —
    CVE-2021-22758

    A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior tha…

  • Unscored —
    CVE-2021-22759

    A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in…

  • Unscored —
    CVE-2021-22760

    A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and p…

  • Unscored —
    CVE-2021-22761

    A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists inIGSS Definiti…

  • Unscored —
    CVE-2021-22762

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition (Def.exe) …

Revision history

  1. #1

    ICSA-21-159-04 Schneider Electric IGSS

References