CVE-2021-22809

A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 (Build 683.003) and prior

Score

CVSS 3.1 5.5 Medium

Status

Modified - cybersecurity@se.com

Published

2022-01-28

Last modified

2024-08-03

Weaknesses

CWE-125

Affected products

• Guicon (Schneider-electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-313-07