Lucene search

K
cve[email protected]CVE-2013-0657
HistoryJan 21, 2013 - 4:55 p.m.

CVE-2013-0657

2013-01-2116:55:01
CWE-119
web.nvd.nist.gov
138
cve-2013-0657
schneider electric
igss
scada
buffer overflow
remote code execution
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.701 High

EPSS

Percentile

98.0%

Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol.

Affected configurations

NVD
Node
schneider-electricinteractive_graphical_scada_systemRange10.0
OR
schneider-electricinteractive_graphical_scada_systemMatch9.0

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.701 High

EPSS

Percentile

98.0%