Description
A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | — |
Advisories 2
- ICSA-22-046-01 Schneider Electric IGSS CISA ICS & IT advisories · Feb 15, 2022
- SEVD-2022-039-01 IGSS (Interactive Graphical SCADA System) Schneider Electric CPCERT · Feb 8, 2022