CVE-2021-22750

A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21041 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious CGF file is imported to IGSS Definition.

Score

CVSS 3.1 7.8 High

Status

Modified - cybersecurity@se.com

Published

2021-06-11

Last modified

2024-08-03

Weaknesses

CWE-787

Affected products

• Interactive Graphical Scada System (Schneider-electric)

References

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01