CVE-2020-7557

HIGH

Schneider-electric Interactive Graphi... - Out-of-Bounds Read

Title source: rule
STIX 2.1

Description

A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-21-096/

Scores

CVSS v3 7.8
EPSS 0.0066
EPSS Percentile 71.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-125
Status published
Products (1)
schneider-electric/interactive_graphical_scada_system < 14.0.0.20247
Published Nov 19, 2020
Tracked Since Feb 18, 2026