Description
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could
cause access to manipulate and read specific files in the IGSS project report directory,
potentially leading to a denial-of-service condition when an attacker sends specific messages.
Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | IGSS Data Server (IGSSdataServer.exe) | All – < V15.0.0.22170 | V15.0.0.22170 |
Advisories 1
- SEVD-2022-165-01 IGSS (Interactive Graphical SCADA System) Schneider Electric CPCERT · Mar 13, 2023