Vulnerability Details CVE-2021-22762
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in remote code execution, when a malicious CGF or WSP file is being parsed by IGSS Definition.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.9%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
References
Products affected by CVE-2021-22762
-
cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:10.0
-
cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:12.0
-
cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:13.0
-
cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:13.0.0.19140
-
cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:14.0
-
cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:14.0.0.19120
-
cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:14.0.0.20009
-
cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:14.0.0.20247
-
cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:9.0