Interactive Graphical Scada System (Schneider-electric) - vulnerabilities (CVEs)

43 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2023-09-14. Vendor: Schneider-electric.

CVEs of Interactive Graphical Scada System

CVE-2023-4516 - CVSS 7.8 (high), 2023-09-14: A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update…
CVE-2022-2329 - CVSS 9.8 (critical), 2023-02-01: A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially…
CVE-2022-24324 - CVSS 9.8 (critical), 2023-02-01: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code…
CVE-2022-32528 - CVSS 9.1 (critical), 2023-01-30: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read specific files in the IGSS project…
CVE-2022-32529 - CVSS 9.8 (critical), 2023-01-30: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code…
CVE-2022-32525 - CVSS 9.8 (critical), 2023-01-30: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code…
CVE-2022-32524 - CVSS 9.8 (critical), 2023-01-30: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code…
CVE-2022-32527 - CVSS 9.8 (critical), 2023-01-30: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code…
CVE-2022-32523 - CVSS 9.8 (critical), 2023-01-30: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code…
CVE-2022-32526 - CVSS 9.8 (critical), 2023-01-30: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code…
CVE-2022-32522 - CVSS 9.8 (critical), 2023-01-30: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code…
CVE-2021-22759 - CVSS 7.8 (high), 2021-06-11: A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution…
CVE-2021-22762 - CVSS 7.8 (high), 2021-06-11: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could…
CVE-2021-22758 - CVSS 7.8 (high), 2021-06-11: A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or…
CVE-2021-22761 - CVSS 7.8 (high), 2021-06-11: A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior…
CVE-2021-22760 - CVSS 7.8 (high), 2021-06-11: A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data…
CVE-2021-22750 - CVSS 7.8 (high), 2021-06-11: A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21041 and prior that could result in loss of data or remote code…
CVE-2021-22753 - CVSS 7.8 (high), 2021-06-11: A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code…
CVE-2021-22756 - CVSS 7.8 (high), 2021-06-11: A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or…
CVE-2021-22752 - CVSS 7.8 (high), 2021-06-11: A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code…
CVE-2021-22755 - CVSS 7.8 (high), 2021-06-11: A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or…
CVE-2021-22751 - CVSS 7.8 (high), 2021-06-11: A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or…
CVE-2021-22754 - CVSS 7.8 (high), 2021-06-11: A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code…
CVE-2021-22757 - CVSS 7.8 (high), 2021-06-11: A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or…
CVE-2021-22709 - CVSS 7.8 (high), 2021-03-11: A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition…
CVE-2021-22712 - CVSS 7.8 (high), 2021-03-11: A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition…
CVE-2021-22711 - CVSS 7.8 (high), 2021-03-11: A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition…
CVE-2021-22710 - CVSS 7.8 (high), 2021-03-11: A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition…
CVE-2020-7550 - CVSS 7.8 (high), 2020-11-19: A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 and…
CVE-2020-7553 - CVSS 7.8 (high), 2020-11-19: A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF…
CVE-2020-7556 - CVSS 7.8 (high), 2020-11-19: A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF…
CVE-2020-7552 - CVSS 7.8 (high), 2020-11-19: A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious…
CVE-2020-7555 - CVSS 7.8 (high), 2020-11-19: A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF…
CVE-2020-7558 - CVSS 7.8 (high), 2020-11-19: A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF…
CVE-2020-7551 - CVSS 7.8 (high), 2020-11-19: A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious…
CVE-2020-7554 - CVSS 7.8 (high), 2020-11-19: A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that…
CVE-2020-7557 - CVSS 7.8 (high), 2020-11-19: A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF…
CVE-2020-7479 - CVSS 7.8 (high), 2020-03-23: A CWE-306: Missing Authentication for Critical Function vulnerability exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow…
CVE-2020-7478 - CVSS 7.5 (high), 2020-03-23: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow…
CVE-2019-6827 - CVSS 7.8 (high), 2019-07-15: A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior, which could cause a software crash…
CVE-2017-9967 - CVSS 7.8 (high), 2018-02-12: A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Security configuration settings such as…
CVE-2017-6033 - CVSS 7.8 (high), 2017-04-07: A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System (IGSS) Software, Version 12 and previous versions. The software…
CVE-2013-0657 - CVSS 10 (critical), 2013-01-21: Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrary code…