CVE-2021-22757

HIGH

IGSS Definition <15.0.0.21140 - Info Disclosure/Code Execution

Title source: llm
STIX 2.1

Description

A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied input data, when a malicious CGF file is imported to IGSS Definition.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0049
EPSS Percentile 65.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-125
Status published
Products (1)
schneider-electric/interactive_graphical_scada_system < 15.0.0.21140
Published Jun 11, 2021
Tracked Since Feb 18, 2026