Description
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | — |
Advisories 2
- ICSA-22-046-01 Schneider Electric IGSS CISA ICS & IT advisories · Feb 15, 2022
- SEVD-2022-039-01 IGSS (Interactive Graphical SCADA System) Schneider Electric CPCERT · Feb 8, 2022