CVE-2021-22824: Schneider Electric Interactive Graphical Scada System Data Collector

High severity, CVSS 7.5. EPSS: 14.2% chance of exploitation in the next 30 days.

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21320 and prior)

Affected products

• Schneider Electric Interactive Graphical Scada System Data Collector: up to and including 15.0.0.21320

Published 2022-02-11. Last modified 2026-06-17.