Schneider Electric IGSS Data Server alarm data buffer overflow vulnerability

The Schneider Electric Igss Data Server is a data server for the interactive graphical Scada system from Schneider Electric (France). A buffer overflow vulnerability exists in Schneider Electric IGSS Data Server versions prior to 15.0.0.22140, which stems from a boundary error when processing untrusted input. An attacker could exploit the vulnerability by sending a specially crafted alarm data message that would trigger a memory corruption and execute arbitrary code on the target system.