CVE-2021-22751

A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or execution of arbitrary code due to lack of input validation, when a malicious CGF (Configuration Group File) file is imported to IGSS Definition.

Score

CVSS 3.1 7.8 High

Status

Modified - cybersecurity@se.com

Published

2021-06-11

Last modified

2024-08-03

Weaknesses

CWE-787

Affected products

• Interactive Graphical Scada System (Schneider-electric)

References

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01