CVE-2020-7552

HIGH

Interactive Graphical SCADA System < 14.0.0.20247 - Remote Code Execution via Malicious CGF File Import

Title source: llm
STIX 2.1

Description

A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0158
EPSS Percentile 72.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (1)
schneider-electric/interactive_graphical_scada_system < 14.0.0.20247
Published Nov 19, 2020
Tracked Since Feb 18, 2026