Known vulnerabilities in IGSS SCADA 7

Vendor: Schneider Electric
Software: IGSS SCADA
Version: 7
Software CPE: cpe:2.3:a:schneider_electric:igss_scada:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IGSS SCADA version 7 IGSS SCADA 7 is affected by 10 vulnerabilities: 5 high, 2 medium, 3 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU50136 - Out-of-bounds read
 CWE-125 Low
No
No
 - 29.01.2021 SB2021012907
#VU50135 - Out-of-bounds write
 CWE-787 High
No
No
 - 29.01.2021 SB2021012907
#VU50134 - Out-of-bounds write
 CWE-787 High
No
No
 - 29.01.2021 SB2021012907
#VU50133 - Stack-based buffer overflow
 CWE-121 High
No
No
 - 29.01.2021 SB2021012907
#VU50132 - Stack-based buffer overflow
 CWE-121 High
No
No
 - 29.01.2021 SB2021012907
#VU50131 - Out-of-bounds write
 CWE-787 High
No
No
 - 29.01.2021 SB2021012907
#VU26352 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-7478		 CWE-22 Medium
No
No
 14.0.0.20009 24.03.2020 SB2020032416
#VU26351 - Missing Authentication for Critical Function
CVE-2020-7479		 CWE-306 Low
No
No
 14.0.0.20009 24.03.2020 SB2020032416
#VU19160 - Out-of-bounds write
CVE-2019-6827		 CWE-787 Medium
No
No
 13.0.0.19140, 14.0.0.19120 12.07.2019 SB2019071206
#VU10575 - Permissions, Privileges, and Access Controls
CVE-2017-9967		 CWE-264 Low
No
No
 - 14.02.2018 SB2018021406