Skip to content
OpenAdvisories
High SEVD-2021-159-01 13 CVEs

IGSS (Interactive Graphical SCADA System)

Published Jun 8, 2021 · Updated Jun 8, 2021

Vendor: Schneider Electric Product: IGSS Definition (Def.exe) Product: IGSS Definition module: Def.exe

Summary

Customers should use appropriate patching methodologies when applying these patches to their systems. We strongly recommend the use of back-ups and evaluating the impact of these patches in a Test and Development environment or on an offline infrastructure. Contact Schneider Electric's Customer Care Center if you need assistance removing a patch.

Vulnerabilities 13

  • Unscored —
    CVE-2021-22750

    A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21041 and prior that could resu…

  • Unscored —
    CVE-2021-22751

    A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resu…

  • Unscored —
    CVE-2021-22752

    A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resu…

  • Unscored —
    CVE-2021-22753

    A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resul…

  • Unscored —
    CVE-2021-22754

    A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resu…

  • Unscored —
    CVE-2021-22755

    A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resu…

  • Unscored —
    CVE-2021-22756

    A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resul…

  • Unscored —
    CVE-2021-22757

    A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resul…

  • Unscored —
    CVE-2021-22758

    A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior tha…

  • Unscored —
    CVE-2021-22759

    A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in…

  • Unscored —
    CVE-2021-22760

    A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and p…

  • Unscored —
    CVE-2021-22761

    A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists inIGSS Definiti…

  • Unscored —
    CVE-2021-22762

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition (Def.exe) …

Revision history

  1. #1.0.0

    Original Release

References