Skip to content
OpenAdvisories
High SEVD-2023-073-04 8 CVEs

IGSS (Interactive Graphical SCADA System)

Published Mar 14, 2023 · Updated Mar 14, 2023

Vendor: Schneider Electric Product: Custom Reports Product: IGSS Custom Reports Product: IGSS Dashboard Product: IGSS Data Server

Summary

Schneider Electric is aware of multiple vulnerabilities in its Data Server, Dashboard and Custom Reports modules for the IGSS (Interactive Graphical SCADA System) product.
The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. The Data Server is a module with a TCP interface used by other modules like the Dashboard and the Custom Reports to access data of the SCADA System to be presented.
Failure to apply the remediation provided below may result in Denial of Service and dashboards or report files in the IGSS Report folder being lost, added or changed. Further it may risk remote code execution, which could result in a variety of issues including loss of control of the SCADA System with IGSS running in production mode.

Vulnerabilities 8

Revision history

  1. #1.0.0

    Original Release

References