CVE-2021-22807

A CWE-787: Out-of-bounds Write vulnerability exists that could cause arbitrary code execution when a malicious .gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 Build 683.003 and prior...

CVE-2021-22808: Use After Free

A CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a malicious .gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 Build 683.003 and prior...

CVE-2021-22807: Out-of-bounds Write

A CWE-787: Out-of-bounds Write vulnerability exists that could cause arbitrary code execution when a malicious .gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 Build 683.003 and prior...

CVE-2021-22809: Out-of-bounds Read

A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious .gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 Build 683.003 and prior...

PT-2021-6899

Name of the Vulnerable Software and Affected Versions Eurotherm by Schneider Electric GUIcon version 2.0 Build 683.003 and prior Description A Use After Free vulnerability exists that could cause arbitrary code execution when a malicious .gd1 configuration file is loaded into the GUIcon tool. Thi...

PT-2021-6897

Name of the Vulnerable Software and Affected Versions Eurotherm by Schneider Electric GUIcon versions prior to 2.0 Build 683.003 Description The issue is related to errors in processing .gd1 configuration files, which could allow an attacker to gain access to protected information or cause a deni...

Schneider Electric GUIcon

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Schneider Electric Equipment: GUIcon Vulnerabilities: Out-of-bounds Write, Use After Free, Out-of-bounds Read 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow an attacker to execute arbitrary...

PT-2021-6900

Name of the Vulnerable Software and Affected Versions Eurotherm by Schneider Electric GUIcon version 2.0 Build 683.003 and prior Description A CWE-787: Out-of-bounds Write issue exists that could cause arbitrary code execution when a malicious .gd1 configuration file is loaded into the GUIcon too...

Schneider Electric Eurotherm by Schneider Electric GUIcon buffer error vulnerability

Schneider Electric Eurotherm by Schneider Electric GUIcon is a suite of graphical user interface programming software from Schneider Electric France. Schneider Electric Eurotherm by Schneider Electric GUIcon suffers from a buffer error vulnerability that originates when a malicious .gd1...

Type confusion

A Type Confusion CWE-843 vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 Gold Build 683.0 on pcwin.dll which could cause remote code to be executed when parsing a GD1 file...

CVE-2018-7814

A Stack-based Buffer Overflow CWE-121 vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 Gold Build 683.0 which could cause remote code to be executed when parsing a GD1 file...

Stack overflow

A Stack-based Buffer Overflow CWE-121 vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 Gold Build 683.0 which could cause remote code to be executed when parsing a GD1 file...

Type confusion

A Type Confusion CWE-843 vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 Gold Build 683.0 on c3core.dll which could cause remote code to be executed when parsing a GD1 file...

CVE-2018-7813

A Type Confusion CWE-843 vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 Gold Build 683.0 on pcwin.dll which could cause remote code to be executed when parsing a GD1 file...

CVE-2018-7815

A Type Confusion CWE-843 vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 Gold Build 683.0 on c3core.dll which could cause remote code to be executed when parsing a GD1 file...

CVE-2018-7814

A Stack-based Buffer Overflow CWE-121 vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 Gold Build 683.0 which could cause remote code to be executed when parsing a GD1 file...

CVE-2018-7815

A Type Confusion CWE-843 vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 Gold Build 683.0 on c3core.dll which could cause remote code to be executed when parsing a GD1 file...

CVE-2018-7815

A Type Confusion CWE-843 vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 Gold Build 683.0 on c3core.dll which could cause remote code to be executed when parsing a GD1 file...

CVE-2018-7813

A Type Confusion CWE-843 vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 Gold Build 683.0 on pcwin.dll which could cause remote code to be executed when parsing a GD1 file...

CVE-2018-7815

CVE-2018-7815 is a type confusion vulnerability in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) affecting c3core.dll, leading to remote code execution when parsing a GD1 file. Documents from ZDI describe the flaw as a type confusion in GUIcon’s GD1 parsing, with exploitation req...