CVE-2020-7557

A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.

Score

CVSS 3.1 7.8 High

Status

Modified - cybersecurity@se.com

Published

2020-11-19

Last modified

2024-08-04

Weaknesses

CWE-125

Affected products

• Interactive Graphical Scada System (Schneider-electric)

References

• https://www.se.com/ww/en/download/document/SEVD-2020-315-03/
• https://www.zerodayinitiative.com/advisories/ZDI-21-096/