CVE-2020-7557

HIGH

Interactive Graphical SCADA System < 14.0.0.20247 - Remote Code Execution via Malicious CGF File Import

Title source: llm
STIX 2.1

Description

A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-21-096/

Scores

CVSS v3 7.8
EPSS 0.0239
EPSS Percentile 82.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-125
Status published
Products (1)
schneider-electric/interactive_graphical_scada_system < 14.0.0.20247
Published Nov 19, 2020
Tracked Since Feb 18, 2026