Description
A CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 (Build 683.003) and prior
Advisories 2
- ICSA-21-313-02 Schneider Electric GUIcon CISA ICS & IT advisories · Nov 9, 2021
- SEVD-2021-313-07 Eurotherm GUIcon Schneider Electric CPCERT · Nov 9, 2021