CVE-2020-7554

HIGH

Interactive Graphical SCADA System < 14.0.0.20247 - Remote Code Execution via Malicious CGF File Import

Title source: llm
STIX 2.1

Description

A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-21-093/

Scores

CVSS v3 7.8
EPSS 0.0066
EPSS Percentile 71.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (1)
schneider-electric/interactive_graphical_scada_system < 14.0.0.20247
Published Nov 19, 2020
Tracked Since Feb 18, 2026