CVE-2021-22823

2022-02-1117:40:39

CWE-306

schneider

www.cve.org

igss

arbitrary file deletion

cwe-306

scada system

authentication

cve-2021-22823

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 and prior)

CNA Affected

[
  {
    "product": "Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 and prior)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 and prior)"
      }
    ]
  }
]