Schneider Electric IGSS Data Server (Igssdataserver.Exe) vulnerabilities
10 vulnerabilities
Known vulnerabilities in Schneider Electric IGSS Data Server (Igssdataserver.Exe), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-2329schneider electricigss data server (igssdataserver.exe)+1
EPSS score2.14%
A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22073)CVE-2022-24324schneider electricigss data server (igssdataserver.exe)+1EPSS score1.20%
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22073)CVE-2022-32523schneider electricigss data server (igssdataserver.exe)+1EPSS score1.27%
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted online data request messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)CVE-2022-32522schneider electricigss data server (igssdataserver.exe)+1EPSS score1.11%
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted mathematically reduced data request messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)CVE-2022-32526schneider electricigss data server (igssdataserver.exe)+1EPSS score1.27%
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted setting value messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)CVE-2022-32529schneider electricigss data server (igssdataserver.exe)+1EPSS score1.27%
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted log data request messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)CVE-2022-32525schneider electricigss data server (igssdataserver.exe)+1EPSS score1.27%
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted alarm data messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)CVE-2022-32528schneider electricigss data server (igssdataserver.exe)+1EPSS score0.47%
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could
cause access to manipulate and read specific files in the IGSS project report directory,
potentially leading to a denial-of-service condition when an attacker sends specific messages.
Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)CVE-2022-32524schneider electricigss data server (igssdataserver.exe)+1EPSS score1.27%
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted time reduced data messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)CVE-2022-32527schneider electricigss data server (igssdataserver.exe)+1EPSS score1.27%
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted alarm cache data messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)