Known vulnerabilities in IGSS Data Server
Vendor:
Schneider Electric
Software:
IGSS Data Server
Software CPE:
cpe:2.3:a:schneider_electric:igss_data_server:*:*:*:*:*:*:*:*
Total vulnerabilities:
22
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (22)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU73824 - Insufficient Verification of Data Authenticity CVE-2023-27977 |
CWE-345 | Medium | 16.0.0.23041 | 20.03.2023 |
SB2023032025 |
||
| #VU73823 - Insufficient Verification of Data Authenticity CVE-2023-27979 |
CWE-345 | Medium | 16.0.0.23041 | 20.03.2023 |
SB2023032025 |
||
| #VU73822 - Insufficient Verification of Data Authenticity CVE-2023-27982 |
CWE-345 | Medium | 16.0.0.23041 | 20.03.2023 |
SB2023032025 |
||
| #VU73820 - Missing Authentication for Critical Function CVE-2023-27980 |
CWE-306 | High | 16.0.0.23041 | 20.03.2023 |
SB2023032025 |
||
| #VU73819 - Missing Authentication for Critical Function CVE-2023-27983 |
CWE-306 | Medium | 16.0.0.23041 | 20.03.2023 |
SB2023032025 |
||
| #VU64500 - Memory corruption CVE-2022-24324 |
CWE-119 | High | 15.0.0.22074 | 20.06.2022 |
SB2022062012 |
||
| #VU64498 - Missing Authentication for Critical Function CVE-2022-32528 |
CWE-306 | High | 15.0.0.22140 | 20.06.2022 |
SB2022062010 |
||
| #VU64496 - Memory corruption CVE-2022-32529 |
CWE-119 | High | 15.0.0.22140 | 20.06.2022 |
SB2022062010 |
||
| #VU64495 - Memory corruption CVE-2022-32527 |
CWE-119 | High | 15.0.0.22140 | 20.06.2022 |
SB2022062010 |
||
| #VU64494 - Memory corruption CVE-2022-32526 |
CWE-119 | High | 15.0.0.22140 | 20.06.2022 |
SB2022062010 |
||
| #VU64493 - Memory corruption CVE-2022-32525 |
CWE-119 | High | 15.0.0.22140 | 20.06.2022 |
SB2022062010 |
||
| #VU64492 - Memory corruption CVE-2022-32524 |
CWE-119 | High | 15.0.0.22140 | 20.06.2022 |
SB2022062010 |
||
| #VU64488 - Memory corruption CVE-2022-32523 |
CWE-119 | High | 15.0.0.22140 | 20.06.2022 |
SB2022062010 |
||
| #VU64487 - Memory corruption CVE-2022-32522 |
CWE-119 | High | 15.0.0.22140 | 20.06.2022 |
SB2022062010 |
||
| #VU60574 - Out-of-bounds read CVE-2022-24314 |
CWE-125 | Medium | 15.0.0.22021 | 14.02.2022 |
SB2022021405 |
||
| #VU60573 - Integer overflow CVE-2022-24310 |
CWE-190 | High | 15.0.0.22021 | 14.02.2022 |
SB2022021405 |
||
| #VU60572 - Missing Authorization CVE-2022-24317 |
CWE-862 | Medium | 15.0.0.22021 | 14.02.2022 |
SB2022021405 |
||
| #VU60571 - Out-of-bounds read CVE-2022-24315 |
CWE-125 | Medium | 15.0.0.22021 | 14.02.2022 |
SB2022021405 |
||
| #VU60570 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-24311 |
CWE-22 | Medium | 15.0.0.22021 | 14.02.2022 |
SB2022021405 |
||
| #VU60567 - Stack-based buffer overflow CVE-2022-24313 |
CWE-121 | High | 15.0.0.22021 | 14.02.2022 |
SB2022021405 |
Showing elements 1 - 20 out of 22