CVE-2020-7552

A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.

Score

CVSS 3.1 7.8 High

Status

Modified - cybersecurity@se.com

Published

2020-11-19

Last modified

2024-08-04

Weaknesses

CWE-787

Affected products

• Interactive Graphical Scada System (Schneider-electric)

References

• https://www.se.com/ww/en/download/document/SEVD-2020-315-03/