CVE-2021-22712

Katalog CVE

CVSS 7.8 · High EPSS 0,93%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada schneider-electric interactive graphical scada system. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could result in arbitrary read or write conditions when malicious CGF (Configuration Group File) file is imported to IGSS Definition due to an unchecked pointer address.

Rincian

Terbit di NVD

11 Maret 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

0,93% peluang dieksploitasi; lebih tinggi dari 59,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01 patch · advisory vendor
• https://www.se.com/ww/en/download/document/SEVD-2021-068-01 broken link · advisory vendor