CVE-2022-24310

CVE-2022-24310 affects Schneider Electric IGSS Data Server (v15.0.0.22020 and prior). Root cause: CWE-190 integer overflow/wraparound that can cause a heap-based buffer overflow, enabling denial of service and potentially remote code execution when processing multiple specially crafted messages. ...

CVE-2022-24311

Schneider Electric IGSS Data Server (v15.0.0.22020 and earlier) includes a CWE-22 path traversal vulnerability that can modify an existing file or create a new one in the Data Server context, potentially enabling remote code execution when a specially crafted message is sent. The Red Hat/ICSA adv...

CVE-2022-24312

Schneider Electric IGSS Data Server (IGSSdataServer.exe) v15.0.0.22020 and earlier is affected by CVE-2022-24312, a CWE-22 path traversal vulnerability that could allow modification of existing files or creation of new files in the Data Server context, potentially enabling remote code execution w...

CVE-2022-24313

CVE-2022-24313 is a stack-based buffer overflow in Schneider Electric IGSS Data Server (IGSSdataServer.exe) affecting v15.0.0.22020 and earlier. The vulnerability arises from copying user-supplied data into a fixed-size stack buffer, enabling remote code execution. Public advisories describe expl...

CVE-2022-24315

CVE-2022-24315 is an Out-of-bounds Read vulnerability in Schneider Electric IGSS Data Server (v15.0.0.22020 and earlier) that could cause denial of service when a client repeatedly sends specially crafted messages. Roots cause: memory read past buffer boundary in IGSSDataServer; CVSSv3 base score...

CVE-2022-24317

Schneider Electric IGSS Data Server (v15.0.0.22020 and earlier) contains a Missing Authorization vulnerability (CWE-862) that could expose information when a specially crafted message is sent. Multiple sources (CVE records, Red Hat advisory RH:CVE-2022-24317, ZDI-22-324, CNVD-2022-13072, ICSA-22-...

CVE-2022-24316

Schneider Electric IGSS Data Server (IGSSdataServer.exe) is affected by CVE-2022-24316, a CWE-665 Improper Initialization vulnerability (information exposure) in the IGSS Data Server v15.0.0.22020 and prior. Exploitation involves sending a specially crafted message to the server (the vulnerabilit...

CVE-2022-24314

Schneider Electric IGSS Data Server (Interactive Graphical SCADA System Data Server) affected: v15.0.0.22020 and prior. CVE-2022-24314 is a CWE-125 Out-of-bounds Read vulnerability that can cause memory leaks and potentially denials of service when an attacker sends specially crafted messages. Th...