CVE-2020-7554: Schneider Electric Interactive Graphical Scada System

High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days.

A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.

Affected products

• Schneider Electric Interactive Graphical Scada System: up to and including 14.0.0.20247

Published 2020-11-19. Last modified 2026-06-17.