Vulnerabilities > Schneider Electric > Interactive Graphical Scada System > 13.0

DATE CVE VULNERABILITY TITLE RISK
2023-01-30 CVE-2022-32529 Classic Buffer Overflow vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted log data request messages.
network
low complexity
schneider-electric CWE-120
critical
 9.8
9.8
2021-06-11 CVE-2021-22750 Out-of-bounds Write vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21041 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious CGF file is imported to IGSS Definition. 		6.8
6.8
2021-06-11 CVE-2021-22751 Out-of-bounds Write vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or execution of arbitrary code due to lack of input validation, when a malicious CGF (Configuration Group File) file is imported to IGSS Definition. 		6.8
6.8
2021-06-11 CVE-2021-22752 Out-of-bounds Write vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing size checks, when a malicious WSP (Workspace) file is being parsed by IGSS Definition. 		6.8
6.8
2021-06-11 CVE-2021-22753 Out-of-bounds Read vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious WSP file is being parsed by IGSS Definition. 		6.8
6.8
2021-06-11 CVE-2021-22754 Out-of-bounds Write vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack of proper validation of user-supplied data, when a malicious CGF file is imported to IGSS Definition. 		6.8
6.8
2021-06-11 CVE-2021-22755 Out-of-bounds Write vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied data, when a malicious CGF file is imported to IGSS Definition. 		6.8
6.8
2021-06-11 CVE-2021-22756 Out-of-bounds Read vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of user-supplied data validation, when a malicious CGF file is imported to IGSS Definition. 		6.8
6.8
2021-06-11 CVE-2021-22757 Out-of-bounds Read vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied input data, when a malicious CGF file is imported to IGSS Definition. 		6.8
6.8
2021-06-11 CVE-2021-22758 Access of Uninitialized Pointer vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack validation of user-supplied input data, when a malicious CGF file is imported to IGSS Definition. 		6.8
6.8