Vulnerabilities > Schneider Electric > High

DATE CVE VULNERABILITY TITLE RISK
2021-06-11 CVE-2021-22751 Unspecified vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or execution of arbitrary code due to lack of input validation, when a malicious CGF (Configuration Group File) file is imported to IGSS Definition.
local
low complexity
schneider-electric
7.8
2021-06-11 CVE-2021-22752 Unspecified vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing size checks, when a malicious WSP (Workspace) file is being parsed by IGSS Definition.
local
low complexity
schneider-electric
7.8
2021-06-11 CVE-2021-22753 Unspecified vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious WSP file is being parsed by IGSS Definition.
local
low complexity
schneider-electric
7.8
2021-06-11 CVE-2021-22754 Unspecified vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack of proper validation of user-supplied data, when a malicious CGF file is imported to IGSS Definition.
local
low complexity
schneider-electric
7.8
2021-06-11 CVE-2021-22755 Unspecified vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied data, when a malicious CGF file is imported to IGSS Definition.
local
low complexity
schneider-electric
7.8
2021-06-11 CVE-2021-22756 Out-of-bounds Read vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of user-supplied data validation, when a malicious CGF file is imported to IGSS Definition.
local
low complexity
schneider-electric CWE-125
7.8
2021-06-11 CVE-2021-22757 Unspecified vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied input data, when a malicious CGF file is imported to IGSS Definition.
local
low complexity
schneider-electric
7.8
2021-06-11 CVE-2021-22758 Unspecified vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack validation of user-supplied input data, when a malicious CGF file is imported to IGSS Definition.
local
low complexity
schneider-electric
7.8
2021-06-11 CVE-2021-22759 Unspecified vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to use of unchecked input data, when a malicious CGF file is imported to IGSS Definition.
local
low complexity
schneider-electric
7.8
2021-06-11 CVE-2021-22760 Unspecified vulnerability in Schneider-Electric Interactive Graphical Scada System
A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing checks of user-supplied input data, when a malicious CGF file is imported to IGSS Definition.
local
low complexity
schneider-electric
7.8