Summary
Schneider Electric is aware of a vulnerability in its Update Service for the IGSS (Interactive Graphical SCADA System) product.
The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. The IGSS Update Service handles IGSS Software to be updated.
Failure to apply the remediation provided below may risk remote code execution, which could result in a variety of issues including loss of control of the SCADA System with IGSS running in production mode
Vulnerabilities 1
-
High 7.8
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allo…
Revision history
-
#1
Original Release
References
-
IGSS (Interactive Graphical SCADA System) - SEVD-2023-255-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-255-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-255-01.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/