Interactive Graphical Scada System vulnerabilities

11 known vulnerabilities in Interactive Graphical Scada System from Schneider Electric. 11 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  IGSS Update Service (IGSSupdateservice.exe): Missing Authentication for Critical Functionality

  CVE-2023-4516Sep 14, 2023Schneider Electric

  A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update source, potentially leading to remote code execution when the attacker force an update containing malicio

• 9.8 Critical severity

  IGSS Data Server (IGSSdataServer.exe): Integer Overflow or Wraparound

  CVE-2022-2329Feb 1, 2023Schneider ElectricEPSS 2.25%

  A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Products: IGSS D

• 9.8 Critical severity

  IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input

  CVE-2022-24324Feb 1, 2023Schneider ElectricEPSS 1.27%

  A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Products: IGSS Data Server - IGS

• 9.8 Critical severity

  IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input

  CVE-2022-32529Jan 30, 2023Schneider ElectricEPSS 1.33%

  A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted log data request messages. Affected Products: IGSS

• 9.1 Critical severity

  IGSS Data Server (IGSSdataServer.exe): Missing Authentication for Critical Functionality

  CVE-2022-32528Jan 30, 2023Schneider Electric

  A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read specific files in the IGSS project report directory, potentially leading to a denial-of-service condition when an attacker sends specifi

• 9.8 Critical severity

  IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input

  CVE-2022-32527Jan 30, 2023Schneider ElectricEPSS 1.33%

  A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted alarm cache data messages. Affected Products: IGSS

• 9.8 Critical severity

  IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input

  CVE-2022-32526Jan 30, 2023Schneider ElectricEPSS 1.33%

  A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted setting value messages. Affected Products: IGSS Dat

• 9.8 Critical severity

  IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input

  CVE-2022-32525Jan 30, 2023Schneider ElectricEPSS 1.33%

  A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted alarm data messages. Affected Products: IGSS Data S

• 9.8 Critical severity

  IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input

  CVE-2022-32524Jan 30, 2023Schneider ElectricEPSS 1.33%

  A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted time reduced data messages. Affected Products: IGSS

• 9.8 Critical severity

  IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input

  CVE-2022-32523Jan 30, 2023Schneider ElectricEPSS 1.33%

  A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted online data request messages. Affected Products: IG

• 9.8 Critical severity

  IGSS Data Server (IGSSdataServer.exe): Buffer Copy without Checking Size of Input

  CVE-2022-32522Jan 30, 2023Schneider ElectricEPSS 1.17%

  A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted mathematically reduced data request messages. Affec