Description
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user supplied data, when a constructed message is received on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) | — |
Advisories 2
- ICSA-21-285-03 Schneider Electric IGSS CISA ICS & IT advisories · Oct 12, 2021
- SEVD-2021-285-03 IGSS (Interactive Graphical SCADA System) Schneider Electric CPCERT · Oct 12, 2021