Skip to content
OpenAdvisories
High ICSA-21-313-02 3 CVEs

Schneider Electric GUIcon

Published Nov 9, 2021 · Updated Nov 9, 2021

Vendor: Schneider Electric Product: GUIcon

Summary

Successful exploitation of these vulnerabilities may allow an attacker to execute arbitrary code on the host PC, leading to sensitive information disclosure or unintended user actions.

Vulnerabilities 3

  • Unscored —
    CVE-2021-22807

    A CWE-787: Out-of-bounds Write vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 co…

  • Unscored —
    CVE-2021-22808

    A CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configu…

  • Unscored —
    CVE-2021-22809

    A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious *.gd1 co…

Revision history

  1. #1

    ICSA-21-313-02 Schneider Electric GUIcon

References