Use After Free Vulnerability in Eurotherm by Schneider Electric GUIcon Tool
CVE-2021-22808

7.8HIGH

Key Information:

Vendor
Schneider Electric
Status
Guicon
Vendor
CVE Published:
28 January 2022

Summary

A Use After Free vulnerability has been identified in the Eurotherm by Schneider Electric GUIcon tool that may allow an attacker to execute arbitrary code. This flaw arises when processing a malicious *.gd1 configuration file within the GUI, enabling potential exploitation through crafted inputs. Users are advised to ensure that they are using the latest versions of the software to mitigate this risk. For more information, consult the security advisory provided by Schneider Electric.

References

https://download.schneider-electric.com/files?p_Doc_Ref=S...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.