CVE-2020-7552

A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7552

CVE-2020-7552 affects Schneider Electric IGSS Definition (Def.exe) up to version 14.0.0.20247. The issue is a CGF file parsing heap-based buffer overflow that could lead to remote code execution. ZDI details indicate the flaw exists in parsing CGF files, enabling code execution in the current pro...