Schneider Electric IGSS Data Server (IGSSdataServer.exe)
18 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-27984 | V – 16.0.0.23040 | A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to r | HIGH 8.8 | 0.6 % | ||
| CVE-2023-27983 | V – 16.0.0.23040 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow deletion of r | MEDIUM 6.5 | 0.4 % | ||
| CVE-2023-27982 | V – 16.0.0.23040 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard | HIGH 8.8 | 0.4 % | ||
| CVE-2023-27981 | V – 16.0.0.23040 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code | HIGH 8.8 | 0.7 % | ||
| CVE-2023-27980 | V – 16.0.0.23040 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow the creation | HIGH 8.8 | 0.9 % | ||
| CVE-2023-27979 | V – 16.0.0.23040 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the renaming of files in | MEDIUM 6.5 | 0.2 % | ||
| CVE-2023-27978 | V – 16.0.0.23040 | A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious pa | HIGH 7.8 | 6.5 % | ||
| CVE-2023-27977 | V – 16.0.0.23040 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in | MEDIUM 6.5 | 0.2 % | ||
| CVE-2022-24324 | All – < V15.0.0.22073 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leadin | CRITICAL 9.8 | 1.2 % | ||
| CVE-2022-2329 | All – < V15.0.0.22073 | A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and | CRITICAL 9.8 | 2.1 % | ||
| CVE-2022-32529 | All – < V15.0.0.22170 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leadi | CRITICAL 9.8 | 1.3 % | ||
| CVE-2022-32528 | All – < V15.0.0.22170 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read specific files i | CRITICAL 9.1 | 0.5 % | ||
| CVE-2022-32527 | All – < V15.0.0.22170 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leadi | CRITICAL 9.8 | 1.3 % | ||
| CVE-2022-32526 | All – < V15.0.0.22170 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leadi | CRITICAL 9.8 | 1.3 % | ||
| CVE-2022-32525 | All – < V15.0.0.22170 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leadi | CRITICAL 9.8 | 1.3 % | ||
| CVE-2022-32524 | All – < V15.0.0.22170 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leadi | CRITICAL 9.8 | 1.3 % | ||
| CVE-2022-32523 | All – < V15.0.0.22170 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leadi | CRITICAL 9.8 | 1.3 % | ||
| CVE-2022-32522 | All – < V15.0.0.22170 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leadi | CRITICAL 9.8 | 1.1 % |