CVE-2021-22710

A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could cause remote code execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.

Score

CVSS 3.1 7.8 High

Status

Modified - cybersecurity@se.com

Published

2021-03-11

Last modified

2024-08-03

Weaknesses

CWE-119

Affected products

• Interactive Graphical Scada System (Schneider-electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01
• https://www.se.com/ww/en/download/document/SEVD-2021-068-01