CVE-2021-22753

A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious WSP file is being parsed by IGSS Definition.

Score

CVSS 3.1 7.8 High

Status

Modified - cybersecurity@se.com

Published

2021-06-11

Last modified

2024-08-03

Weaknesses

CWE-125

Affected products

• Interactive Graphical Scada System (Schneider-electric)

References

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01