IGSS (Interactive Graphical SCADA System)

Summary

Vulnerabilities 2

• Unscored —
  CVE-2020-7478

  A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS (Versions 14 and prior using the s…

  Mar 23, 2020
• Unscored —
  CVE-2020-7479

  A CWE-306: Missing Authentication for Critical Function vulnerability exists in IGSS (Versions 14 and prior using the s…

  Mar 23, 2020

Revision history

1. 2020-03-10 #1.0.0

   Original Release

References

• IGSS (Interactive Graphical SCADA System) - SEVD-2020-070-01 PDF Version
  https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-070-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2020-070-01_IGSS_Security_Notification.pdf
• Recommended Cybersecurity Best Practices
  https://www.se.com/us/en/download/document/7EN52-0390/