CVE-2021-22712

A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could result in arbitrary read or write conditions when malicious CGF (Configuration Group File) file is imported to IGSS Definition due to an unchecked pointer address.

Score

CVSS 3.1 7.8 High

Status

Modified - cybersecurity@se.com

Published

2021-03-11

Last modified

2024-08-03

Weaknesses

CWE-119

Affected products

• Interactive Graphical Scada System (Schneider-electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01
• https://www.se.com/ww/en/download/document/SEVD-2021-068-01