Out-of-Bounds Read Vulnerability in Eurotherm by Schneider Electric GUIcon Tool

CVE-2021-22809

What is CVE-2021-22809?

An Out-of-Bounds Read vulnerability in the Eurotherm by Schneider Electric GUIcon tool allows a malicious actor to cause unintended data disclosure. This vulnerability arises when an improperly handled *.gd1 configuration file is loaded, potentially exposing sensitive information. The risk is present in GUIcon Version 2.0 (Build 683.003) and earlier versions, highlighting the importance of prompt updates and vigilant configuration management to mitigate such threats.

References