Schneider-electric Interactive Graphical Scada System Data Server — known CVE vulnerabilities

Every CVE whose affected-product data names Schneider-electric Interactive Graphical Scada System Data Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2022-24310 — CVSS 9.8 (critical): A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service…
• CVE-2022-24311 — CVSS 9.8 (critical): A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing…
• CVE-2022-24312 — CVSS 9.8 (critical): A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing…
• CVE-2022-24313 — CVSS 9.8 (critical): A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially…
• CVE-2022-24314 — CVSS 7.5 (high): A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an…
• CVE-2022-24315 — CVSS 7.5 (high): A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted…
• CVE-2022-24316 — CVSS 7.5 (high): A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted…
• CVE-2022-24317 — CVSS 7.5 (high): A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message…