Skip to content
OpenAdvisories
High SEVD-2021-313-07 3 CVEs

Eurotherm GUIcon

Published Nov 9, 2021 · Updated Nov 9, 2021

Vendor: Eurotherm by Schneider Electric Product: GUIcon

Summary

Schneider Electric is aware of multiple vulnerabilities in its GUIcon software.
The GUIcon software was a configuration tool for the discontinued penGUIn HMI range.
Failure to apply the mitigations provided below may risk code belonging to the attacker being executed on the host PC, leading to Denial of Service, sensitive information disclosure, or unintended user actions.

Vulnerabilities 3

  • Unscored —
    CVE-2021-22807

    A CWE-787: Out-of-bounds Write vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 co…

  • Unscored —
    CVE-2021-22808

    A CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configu…

  • Unscored —
    CVE-2021-22809

    A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious *.gd1 co…

Revision history

  1. #1.0.0

    Original Release

References