CVE-2021-22761 is a vulnerability in Schneider Electric Interactive Graphical Scada System
Published on June 11, 2021
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code e+F15xecution due to missing length check on user supplied data, when a malicious CGF file is imported to IGSS Definition.
Weakness Type
What is a Buffer Overflow Vulnerability?
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
CVE-2021-22761 has been classified to as a Buffer Overflow vulnerability or weakness.
Products Associated with CVE-2021-22761
Want to know whenever a new CVE is published for Schneider Electric Interactive Graphical Scada System? stack.watch will email you.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.