Description
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number of paths, when an attacker, writes arbitrary files to folders in context of the DC module, by sending constructed messages on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) | — |
Advisories 2
- ICSA-21-285-03 Schneider Electric IGSS CISA ICS & IT advisories · Oct 12, 2021
- SEVD-2021-285-03 IGSS (Interactive Graphical SCADA System) Schneider Electric CPCERT · Oct 12, 2021