IGSS Update Service (IGSSupdateservice.exe) vulnerabilities
1 known vulnerability in IGSS Update Service (IGSSupdateservice.exe) from Schneider Electric. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest first
- 7.8 High severity
IGSS Update Service (IGSSupdateservice.exe): Missing Authentication for Critical Functionality
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update source, potentially leading to remote code execution when the attacker force an update containing malicio