CVE-2020-7557

Schneider Electric IGSS Definition (Def.exe) 14.0.0.20247 contains a CWE-125 Out-of-bounds Read that could lead to Remote Code Execution when a malicious CGF file is imported. The issue stems from parsing CGF data and impacts IGSS Definition components responsible for that import path. ZDI confir...

CVE-2020-7556

A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7556

The CVE-2020-7556 issue affects Schneider Electric IGSS Definition (Def.exe) 14.0.0.20247. It is an out-of-bounds write (CWE-787) in the CGF file parsing that could lead to remote code execution when a malicious CGF is imported. Public details indicate a high-severity vulnerability (CVSS v3 base ...

CVE-2020-7555

Schneider Electric IGSS suffers CWE-787 out-of-bounds write in IGSS Definition (Def.exe) 14.0.0.20247 and earlier, enabling remote code execution when a malicious CGF file is imported. Exploitation requires user interaction (e.g., opening a malicious file/page). Remediation: update to IGSS 14.0.0...

CVE-2020-7555

A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7554

Schneider Electric IGSS exposes CVE-2020-7554, a CWE-119 buffer-boundary vulnerability in IGSS Definition (Def.exe) 14.0.0.20247 that can lead to Remote Code Execution when a malicious CGF file is imported. The Red Hat/Red Hat-affiliated and ZDI entries describe a stack-based or related boundary ...

CVE-2020-7554

A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7553

Schneider Electric IGSS Def.exe (IGSS Definition) versions affected include 14.0.0.20247 and earlier. A CWE-787 Out-of-bounds Write vulnerability in CGF file parsing could allow Remote Code Execution when a malicious CGF is imported to IGSS Definition. Public details describe a heap-based buffer ...

CVE-2020-7553

A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7552

A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7552

CVE-2020-7552 affects Schneider Electric IGSS Definition (Def.exe) up to version 14.0.0.20247. The issue is a CGF file parsing heap-based buffer overflow that could lead to remote code execution. ZDI details indicate the flaw exists in parsing CGF files, enabling code execution in the current pro...

CVE-2020-7551

A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2020-7551

Schneider Electric IGSS exposes an out-of-bounds write in the IGSS Definition module (Def.exe) version 14.0.0.20247 when parsing a malicious CGF file, allowing Remote Code Execution. The vulnerability (CWE-787) affects Def.exe; exploitation requires user interaction (e.g., opening a malicious CGF...

CVE-2020-7550

CVE-2020-7550 affects Schneider Electric IGSS Definition (Def.exe) >=14.0.0.20247. The issue is an improper restriction of operations within the bounds of a memory buffer during CGF file parsing, leading to remote code execution when a malicious CGF is imported. The root cause is a stack-based...

CVE-2020-7550

A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 and prior that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

Schneider Electric Interactive Graphical SCADA System Buffer Error Vulnerability

The Schneider Electric Interactive Graphical SCADA System IGSS is a SCADA Data Acquisition and Supervisory System system for monitoring and controlling industrial processes from Schneider Electric, France. The Interactive Graphical SCADA System suffers from a buffer error vulnerability that stems...

Schneider Electric Interactive Graphical SCADA System (IGSS)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Schneider Electric Equipment: Interactive Graphical SCADA System IGSS Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Out-of-bounds Write, Out-of-bounds Read 2. RISK EVALUATION...

Schneider Electric IGSSupdateservice Directory Traversal (CVE-2020-7478)

A directory traversal vulnerability exists in Schneider Electric IGSS SCADA System. The vulnerability is due to improper handling of a user-supplied path in IGSSupdateservice service...

Schneider Electric IGSS IGSSupdateservice Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Schneider Electric IGSS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Schneider Electric IGSS IGSSupdateservice Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Schneider Electric IGSS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IGSSupdateservice service, which listens on TCP port 12414 by defaul...