The vulnerability of the indicator panels of the SCADA system’s data server and the monitoring tools such as Custom Reports and IGSS Dashboard allows a intruder to execute any arbitrary code in the target system.

🗓️ 23 Mar 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

A vulnerability in supervisory control and data acquisition indicator panels risks arbitrary code execution via a crafted file.

Reporter	Title	Published	Views	Family All 12
CNNVD	Schneider Electric IGSS Data Server代码问题漏洞	21 Mar 202300:00	–	cnnvd
CNVD	Schneider Electric IGSS Data Server Code Issue Vulnerability	20 Mar 202300:00	–	cnvd
CVE	CVE-2023-27978	21 Mar 202300:00	–	cve
Cvelist	CVE-2023-27978	21 Mar 202300:00	–	cvelist
ICS	Schneider Electric IGSS	3 Apr 202319:38	–	ics
NVD	CVE-2023-27978	21 Mar 202309:15	–	nvd
OSV	CVE-2023-27978	21 Mar 202309:15	–	osv
Prion	Deserialization of untrusted data	21 Mar 202309:15	–	prion
Positive Technologies	PT-2023-1873 · Unknown · Igss Dashboard +2	14 Mar 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-27978	23 May 202503:34	–	redhatcve

Vulners

Node

schneider_electric igss_data_serverRange≤16.0.0.23040

OR

schneider_electric igss_dashboardRange≤16.0.0.23040

OR

schneider_electric custom_reportsRange≤16.0.0.23040

Source	Link
download	www.download.schneider-electric.com/files
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023032025
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-23-334/
web	www.web.nvd.nist.gov/view/vuln/detail
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-23-334/

23 Mar 2023 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 27.2

CVSS 37.8

EPSS0.039

data server indicator panels memory flaw arbitrary code crafted file monitoring tools custom reports dashboard tool vulnerability