Summary
Schneider Electric is aware of multiple vulnerabilities in the Interactive Graphical SCADA
System (IGSS) product.
The IGSS product is a state-of-the art SCADA system used for monitoring and controlling
industrial processes. IGSS communicates with all major industry standard PLC drivers.
Failure to apply the remediations provided below may risk remote code execution, which could
result in an attacker gaining access to the Windows Operating System on the machine used to
import CGF files, typically a step performed during system design time.
Vulnerabilities 4
-
Unscored —
A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive G…
-
Unscored —
A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive G…
-
Unscored —
A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive G…
-
Unscored —
A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive G…
Revision history
-
#1.0.0
Original Release
References
-
IGSS (Interactive Graphical SCADA System) - SEVD-2021-068-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-068-01_IGSS_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/