Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Schneider Electric IGSS Data Server (IGSSdataServer.exe) V15.0.0.22073 Clear all filters
TI-2022-08204 CVE-2022-24324 · GHSA-66c3-wj8r-m7jp

Buffer overflow in Schneider Electric IGSS Data Server

Priority MEDIUM 51

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01204 Published 2023-02-01 Fixed in V15.0.0.22073 CWE-120
TI-2022-02151 CVE-2022-2329 · GHSA-2384-wfr6-9j3j

Integer overflow in Schneider Electric IGSS Data Server

Priority MEDIUM 53

A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially cra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02124 Published 2023-02-01 Fixed in V15.0.0.22073 CWE-190