Schneider Electric IGSS Buffer Overflow (CVE-2021-22802)

A buffer overflow exists in Schneider Electric IGSS. This vulnerability is due to insufficient input validation...

CVE-2021-22802

creationtimestamp| type| source ---|---|--- 2022-02-11 20:29:09+00:00| seen| https://t.me/cibsecurity/37321...

CVE-2021-22802

Schneider Electric IGSS Data Collector (dc.exe), affected in IGSS v15.0.0.21243 and earlier, is vulnerable to a CWE-120 buffer overflow due to missing length checks on user-supplied data while processing a network-constructed message. This can lead to remote code execution with the dc.exe process...