Improper Buffer Handling in Interactive Graphical SCADA System by Schneider Electric

CVE-2021-22711

Summary

A vulnerability exists in Schneider Electric's Interactive Graphical SCADA System (IGSS) that could allow an attacker to manipulate memory through the improper handling of buffer limits. This issue arises when a malicious Configuration Group File (CGF) is imported, as the system lacks adequate validation of input data, potentially leading to arbitrary read or write operations. Users of versions V15.0.0.21041 and earlier are particularly at risk and should review relevant security advisories to mitigate potential exploitation.

References