Read the docs

Schneider Electric

Records889All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical178CVSS 9.0–10.0
CVSS high452CVSS 7.0–8.9

Exploited now

Schneider Electric records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Interactive Graphical Scada System Data Server · all components

Priority HIGH 71

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.44559 Published 2022-02-09 No fix listed CWE-120
Priority MEDIUM 51

A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.19255 Published 2022-02-09 No fix listed CWE-125
Priority MEDIUM 50

A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeatedly sends a specially crafted message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.18178 Published 2022-02-09 No fix listed CWE-125
Priority MEDIUM 48

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by adding at end of file or create a new file in the context of the Data Server…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03463 Published 2022-02-09 No fix listed CWE-22
Priority MEDIUM 48

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by inserting at beginning of file or create a new file in the context of the Da…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03505 Published 2022-02-09 No fix listed CWE-22
Priority MEDIUM 46

A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially cra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02227 Published 2022-02-09 No fix listed CWE-190
Open these records in search →