Interactive Graphical Scada System Data Server vulnerabilities

Product

Interactive Graphical Scada System Data Server

by Schneider-electric · last CVE Feb 9, 2022

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 4High 4Medium 0Low 0

Severity

All severities8 Critical4 High4 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Interactive Graphical Scada System Data Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-24313	9.8	45%	Feb 9	A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an… Affected: through 15.0.0.22020
CVE-2022-24312	9.8	3%	Feb 9	A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by adding at end of file or create a… Affected: through 15.0.0.22020
CVE-2022-24311	9.8	4%	Feb 9	A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by inserting at beginning of file or… Affected: through 15.0.0.22020
CVE-2022-24310	9.8	2%	Feb 9	A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when… Affected: through 15.0.0.22020
CVE-2022-24317	7.5	1%	Feb 9	A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message Affected: through 15.0.0.22020
CVE-2022-24316	7.5	1%	Feb 9	A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted message Affected: through 15.0.0.22020
CVE-2022-24315	7.5	19%	Feb 9	A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message Affected: through 15.0.0.22020
CVE-2022-24314	7.5	18%	Feb 9	A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeatedly sends a specially crafted… Affected: through 15.0.0.22020