Design/Logic Flaw

A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7558

A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7558

The CVE-2020-7558 entry concerns Schneider Electric IGSS Definition (Def.exe) version 14.0.0.20247 with an Out-of-bounds Write (CWE-787) that can lead to Remote Code Execution when a malicious CGF file is imported. Public sources (ZDI advisory and Red Hat/NVD/NVD-derived records) confirm the affe...

CVE-2020-7557

A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7557

Schneider Electric IGSS Definition (Def.exe) 14.0.0.20247 contains a CWE-125 Out-of-bounds Read that could lead to Remote Code Execution when a malicious CGF file is imported. The issue stems from parsing CGF data and impacts IGSS Definition components responsible for that import path. ZDI confir...

CVE-2020-7556

The CVE-2020-7556 issue affects Schneider Electric IGSS Definition (Def.exe) 14.0.0.20247. It is an out-of-bounds write (CWE-787) in the CGF file parsing that could lead to remote code execution when a malicious CGF is imported. Public details indicate a high-severity vulnerability (CVSS v3 base ...

CVE-2020-7556

A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7555

A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7555

Schneider Electric IGSS suffers CWE-787 out-of-bounds write in IGSS Definition (Def.exe) 14.0.0.20247 and earlier, enabling remote code execution when a malicious CGF file is imported. Exploitation requires user interaction (e.g., opening a malicious file/page). Remediation: update to IGSS 14.0.0...

CVE-2020-7554

A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7554

Schneider Electric IGSS exposes CVE-2020-7554, a CWE-119 buffer-boundary vulnerability in IGSS Definition (Def.exe) 14.0.0.20247 that can lead to Remote Code Execution when a malicious CGF file is imported. The Red Hat/Red Hat-affiliated and ZDI entries describe a stack-based or related boundary ...

CVE-2020-7553

A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7552

A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7551

A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7551

Schneider Electric IGSS exposes an out-of-bounds write in the IGSS Definition module (Def.exe) version 14.0.0.20247 when parsing a malicious CGF file, allowing Remote Code Execution. The vulnerability (CWE-787) affects Def.exe; exploitation requires user interaction (e.g., opening a malicious CGF...

CVE-2020-7550

A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 and prior that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-12307

Improper permissions in some IntelR High Definition Audio drivers before version 9.21.00.4561 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12307

Improper permissions in some IntelR High Definition Audio drivers before version 9.21.00.4561 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12307

CVE-2020-12307 affects Intel(R) High Definition Audio drivers prior to version 9.21.00.4561. The issue is improper permissions that may allow an authenticated local user to escalate privileges. Affected products are Intel HD Audio drivers, with the vulnerability details published in the Intel adv...

Unbreakable Enterprise kernel-container security update

4.14.35-2025.402.2.1.el7 - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040805 CVE-2020-8694 CVE-2020-8695 4.14.35-2025.402.2.el7 - ocfs2: fix remounting needed after setfacl command Gang He - Fix multiple variable definition with syzkaller Hans Westgaard Ry Orabug:...