Remote Code Execution Vulnerability in Schneider Electric Interactive Graphical SCADA System
CVE-2021-22802
9.8CRITICAL
Key Information:
- Vendor
Schneider Electric
- Vendor
- CVE Published:
- 11 February 2022
What is CVE-2021-22802?
A vulnerability has been identified in Schneider Electric's Interactive Graphical SCADA System, specifically in the Data Collector (dc.exe). This flaw allows for remote code execution due to a missing length check on user-supplied data when a crafted message is received over the network. Malicious actors could exploit this weakness, potentially leading to unauthorized system access and manipulation.
Affected Version(s)
Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)