CVE-2021-22757

A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied input data, when a malicious CGF file is imported to IGSS Definition...

CVE-2021-22761

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in disclosure of information or remote code e+F15xecution due to missing length check on user supplied data, when a malicious...

CVE-2021-22758

A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack validation of user-supplied input data, when a malicious CGF file is imported to IGSS Definition...

CVE-2021-22756

A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of user-supplied data validation, when a malicious CGF file is imported to IGSS Definition...

CVE-2021-22756

CVE-2021-22756 affects Schneider Electric IGSS Definition (Def.exe) versions up to 15.0.0.21140. The Red Hat and CNVD/NVD entries describe an out-of-bounds read (CWE-125) caused by insufficient validation when a malicious CGF file is imported, potentially enabling information disclosure or remote...

CVE-2021-22753

A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious WSP file is being parsed by IGSS Definition...

CVE-2021-22754

CVE-2021-22754 is an out-of-bounds write vulnerability in Schneider Electric’s IGSS Definition (Def.exe) up to version 15.0.0.21140. The issue arises from insufficient validation during parsing/import of a malicious CGF file, potentially leading to data loss or remote code execution. Red Hat and ...

CVE-2021-22754

A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack of proper validation of user-supplied data, when a malicious CGF file is imported to IGSS Definition...

CVE-2021-22759

A CWE-416: Use after free vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to use of unchecked input data, when a malicious CGF file is imported to IGSS Definition...

CVE-2021-22753

The CVE-2021-22753 vulnerability affects Schneider Electric IGSS Definition (Def.exe) v15.0.0.21140 and earlier, caused by missing length checks when parsing malicious WSP files, leading to a CWE-125 out-of-bounds read that could result in data loss or remote code execution. Schneider Electric fi...

CVE-2021-22752

CVE-2021-22752 concerns Schneider Electric IGSS Definition (Def.exe) up to v15.0.0.21140. It is a CWE-787 out-of-bounds write vulnerability arising from missing size checks while parsing WSP files, potentially enabling data loss or remote code execution in affected IGSS Definition. The NVD and mu...

CVE-2021-22752

A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing size checks, when a malicious WSP Workspace file is being parsed by IGSS Definition...

CVE-2021-22760

CVE-2021-22760 affects Schneider Electric IGSS Definition (Def.exe) v15.0.0.21140 and earlier, with a CWE-763 release of invalid pointer or reference due to missing checks of user-supplied input when importing a malicious CGF file. Impact could include data loss or remote code execution. Schneide...

CVE-2021-22759

CVE-2021-22759 is a use-after-free vulnerability (CWE-416) in Schneider Electric IGSS Definition (Def.exe) up to version 15.0.0.21140. The Red Hat and NVD/NVD-sourced materials describe that unchecked input data when importing a malicious CGF file into IGSS Definition can lead to data loss or rem...

CVE-2021-22757

The connected Red Hat and Schneider Electric disclosures confirm CVE-2021-22757 affects Schneider Electric IGSS Definition (Def.exe) versions 15.0.0.21140 and earlier. The root cause is an out-of-bounds read (CWE-125) stemming from insufficient input validation when importing a malicious CGF file...

CVE-2021-22755

A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied data, when a malicious CGF file is imported to IGSS Definition...

CVE-2021-22755

The connected sources confirm CVE-2021-22755 affects Schneider Electric IGSS Definition (Def.exe) up to version 15.0.0.21140, with an out-of-bounds write vulnerability arising from insufficient validation/sanity checks when importing a CGF file. Impact is disclosure of information or remote code ...

CVE-2021-22758

IGSS Definition (Def.exe) vulnerability CVE-2021-22758 affects v15.0.0.21140 and earlier, caused by lack of input validation when importing a malicious CGF file, leading to loss of data or remote code execution (CWE-824). Schneider Electric fixes this in Def.exe v15.0.0.21141; remediation guidanc...

CVE-2021-22760

A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing checks of user-supplied input data, when a malicious CGF file is imported to IGSS Definition...

CVE-2021-22751

A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in disclosure of information or execution of arbitrary code due to lack of input validation, when a malicious CGF Configuration Group File file is imported to IGSS Definition...