Interactive Graphical Scada System Data Collector (Schneider-electric) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2022-02-11. Vendor: Schneider-electric.

CVEs of Interactive Graphical Scada System Data Collector

• CVE-2021-22804 - CVSS 7.5 (high), 2022-02-11: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files being read in the…
• CVE-2021-22824 - CVSS 7.5 (high), 2022-02-11: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on…
• CVE-2021-22803 - CVSS 9.8 (critical), 2022-02-11: A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number of paths, when an…
• CVE-2021-22823 - CVSS 9.1 (critical), 2022-02-11: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running…
• CVE-2021-22802 - CVSS 9.8 (critical), 2022-02-11: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user…
• CVE-2021-22805 - CVSS 9.1 (critical), 2022-02-11: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running…