Description
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by inserting at beginning of file or create a new file in the context of the Data Server potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | — |
Advisories 2
- ICSA-22-046-01 Schneider Electric IGSS CISA ICS & IT advisories · Feb 15, 2022
- SEVD-2022-039-01 IGSS (Interactive Graphical SCADA System) Schneider Electric CPCERT · Feb 8, 2022