Description
A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | IGSS Definition (Def.exe) version 14.0.0.20247 and prior | IGSS Definition (Def.exe) version 14.0.0.20247 and prior | — |
Advisories 2
- SEVD-2020-315-03 Interactive Graphical SCADA System (IGSS) Schneider Electric CPCERT · Apr 15, 2021
- ICSA-20-324-04 Schneider Electric Interactive Graphical SCADA System (IGSS) CISA ICS & IT advisories · Nov 17, 2020