Unscored severity · published Jan 21, 2013
CVE-2013-0657
Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrary code by sending TCP…
–
CVSS
21.3%
EPSS
No
On KEV
Description
Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol.
Exploitation
Is it being used?
Exploit prediction (EPSS)21.3% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IG
Interactive Graphical Scada System · Schneider-electric
through 10.0; 9.0 · source: NVD
Affected product
IG
Interactive Graphical Scada System
Schneider-electric
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0657
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0657
Patch
http://igss.schneider-electric.com/igss/igssupdates/v100/progupdatesv100.zip
Patch
http://igss.schneider-electric.com/igss/igssupdates/v90/progupdatesv90.zip
Patch
http://www.us-cert.gov/control_systems/pdf/ICSA-13-018-01.pdf
www.exploit-db.com
https://www.exploit-db.com/exploits/45218/
More from Interactive Graphical Scada System
9.8
CVE-2022-2329
A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when…
9.8
CVE-2022-24324
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an…
9.8
CVE-2022-32529
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an…
9.8
CVE-2022-32527
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an…
9.8
CVE-2022-32526
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an…