CVE-2021-22824

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 and prior)

Score

CVSS 3.1 7.5 High

Status

Modified - cybersecurity@se.com

Published

2022-02-11

Last modified

2024-08-03

Weaknesses

CWE-120

Affected products

• Interactive Graphical Scada System Data Collector (Schneider-electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-01