Lucene search

K
Schneider-electricInteractive Graphical Scada System

11 matches found

CVE
CVE
added 2023/01/30 11:15 p.m.54 views

CVE-2022-32526

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted setting value messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions...

9.8CVSS9.6AI score0.04422EPSS
CVE
CVE
added 2023/09/14 9:15 a.m.50 views

CVE-2023-4516

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS UpdateService that could allow a local attacker to change update source, potentially leading to remotecode execution when the attacker force an update containing malicious content.

7.8CVSS7.5AI score0.00028EPSS
CVE
CVE
added 2023/01/30 11:15 p.m.48 views

CVE-2022-32524

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted time reduced data messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Vers...

9.8CVSS9.6AI score0.04422EPSS
CVE
CVE
added 2023/01/30 11:15 p.m.43 views

CVE-2022-32523

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted online data request messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Ve...

9.8CVSS9.6AI score0.04422EPSS
CVE
CVE
added 2023/01/30 11:15 p.m.41 views

CVE-2022-32522

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted mathematically reduced data request messages. Affected Products: IGSS Data Server - IGSSda...

9.8CVSS9.6AI score0.03784EPSS
CVE
CVE
added 2023/01/30 11:15 p.m.40 views

CVE-2022-32527

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted alarm cache data messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versi...

9.8CVSS9.6AI score0.0361EPSS
CVE
CVE
added 2023/01/30 11:15 p.m.38 views

CVE-2022-32529

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted log data request messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versi...

9.8CVSS9.6AI score0.04422EPSS
CVE
CVE
added 2023/02/01 4:15 a.m.36 views

CVE-2022-2329

A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versio...

9.8CVSS9.7AI score0.03089EPSS
CVE
CVE
added 2023/01/30 11:15 p.m.36 views

CVE-2022-32528

A CWE-306: Missing Authentication for Critical Function vulnerability exists that couldcause access to manipulate and read specific files in the IGSS project report directory,potentially leading to a denial-of-service condition when an attacker sends specific messages. Affected Products: IGSS Data ...

9.1CVSS8.9AI score0.00082EPSS
CVE
CVE
added 2023/01/30 11:15 p.m.33 views

CVE-2022-32525

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted alarm data messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions pr...

9.8CVSS9.7AI score0.05088EPSS
CVE
CVE
added 2023/02/01 4:15 a.m.30 views

CVE-2022-24324

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15....

9.8CVSS9.8AI score0.02316EPSS