Description
A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 (Build 683.003) and prior
Advisories 2
- ICSA-21-313-02 Schneider Electric GUIcon CISA ICS & IT advisories · Nov 9, 2021
- SEVD-2021-313-07 Eurotherm GUIcon Schneider Electric CPCERT · Nov 9, 2021