Skip to content
OpenAdvisories
Critical ICSA-21-285-03 4 CVEs

Schneider Electric IGSS

Published Oct 12, 2021 · Updated Oct 12, 2021

Vendor: Schneider Electric Product: IGSS Data Collector (dc.exe)

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain code execution, read/delete files, and create arbitrary files.

Vulnerabilities 4

  • Unscored —
    CVE-2021-22802 EPSS 20%

    A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution d…

  • Unscored —
    CVE-2021-22803

    A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code executio…

  • Unscored —
    CVE-2021-22804

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure …

  • Unscored —
    CVE-2021-22805

    A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary fil…

Revision history

  1. #1

    ICSA-21-285-03 Schneider Electric IGSS

References