Schneider-electric Interactive Graphical Scada System — known CVE vulnerabilities

Every CVE whose affected-product data names Schneider-electric Interactive Graphical Scada System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (43)

• CVE-2013-0657 — CVSS 10.0 (critical): Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to…
• CVE-2022-32529 — CVSS 9.8 (critical): A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially…
• CVE-2022-2329 — CVSS 9.8 (critical): A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service…
• CVE-2022-24324 — CVSS 9.8 (critical): A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially…
• CVE-2022-32522 — CVSS 9.8 (critical): A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially…
• CVE-2022-32523 — CVSS 9.8 (critical): A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially…
• CVE-2022-32524 — CVSS 9.8 (critical): A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially…
• CVE-2022-32525 — CVSS 9.8 (critical): A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially…
• CVE-2022-32526 — CVSS 9.8 (critical): A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially…
• CVE-2022-32527 — CVSS 9.8 (critical): A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially…
• CVE-2022-32528 — CVSS 8.6 (high): A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read specific files…
• CVE-2020-7556 — CVSS 7.8 (high): A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution…
• CVE-2020-7557 — CVSS 7.8 (high): A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution…
• CVE-2020-7558 — CVSS 7.8 (high): A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution…
• CVE-2021-22709 — CVSS 7.8 (high): A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA…
• CVE-2021-22710 — CVSS 7.8 (high): A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA…
• CVE-2021-22711 — CVSS 7.8 (high): A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA…
• CVE-2021-22712 — CVSS 7.8 (high): A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA…
• CVE-2021-22750 — CVSS 7.8 (high): A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21041 and prior that could result in loss of data…
• CVE-2021-22751 — CVSS 7.8 (high): A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of…
• CVE-2021-22752 — CVSS 7.8 (high): A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data…
• CVE-2021-22753 — CVSS 7.8 (high): A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or…
• CVE-2021-22754 — CVSS 7.8 (high): A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data…
• CVE-2021-22755 — CVSS 7.8 (high): A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of…
• CVE-2021-22756 — CVSS 7.8 (high): A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of…
• CVE-2021-22758 — CVSS 7.8 (high): A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in…
• CVE-2021-22759 — CVSS 7.8 (high): A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or…
• CVE-2021-22760 — CVSS 7.8 (high): A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could…
• CVE-2021-22761 — CVSS 7.8 (high): A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists inIGSS Definition (Def.exe)…
• CVE-2021-22762 — CVSS 7.8 (high): A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and…
• CVE-2021-22757 — CVSS 7.8 (high): A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of…
• CVE-2017-6033 — CVSS 7.8 (high): A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System (IGSS) Software, Version 12 and previous…
• CVE-2017-9967 — CVSS 7.8 (high): A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Security configuration…
• CVE-2019-6827 — CVSS 7.8 (high): A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior, which could cause a…
• CVE-2020-7479 — CVSS 7.8 (high): A CWE-306: Missing Authentication for Critical Function vulnerability exists in IGSS (Versions 14 and prior using the service: IGSSupdate)…
• CVE-2020-7550 — CVSS 7.8 (high): A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version…
• CVE-2020-7551 — CVSS 7.8 (high): A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code…
• CVE-2020-7552 — CVSS 7.8 (high): A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code…
• CVE-2020-7553 — CVSS 7.8 (high): A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution…
• CVE-2020-7554 — CVSS 7.8 (high): A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version…
• CVE-2020-7555 — CVSS 7.8 (high): A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution…
• CVE-2023-4516 — CVSS 7.8 (high): A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker…
• CVE-2020-7478 — CVSS 7.5 (high): A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS (Versions 14 and prior using the service: IGSSupdate)…