CVE-2021-22824

HIGH

Schneider-electric Interactive Graphical Scada System Data Collector < 15.0.0.21320 - Buffer Overflow

Title source: rule
STIX 2.1

Description

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 and prior)

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0328
EPSS Percentile 87.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-120
Status published
Products (1)
schneider-electric/interactive_graphical_scada_system_data_collector < 15.0.0.21320
Published Feb 11, 2022
Tracked Since Feb 18, 2026