Schneider Electric Guicon vulnerabilities

6 CVEs affecting Schneider Electric Guicon, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22809, published 2022-01-28.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-7814, published 2019-02-06. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow (CWE-121) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) which could cause remote code to be executed when parsing a GD1 file
• CVE-2018-7815, published 2019-02-06. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) on c3core.dll which could cause remote code to be executed when parsing a GD1 file
• CVE-2018-7813, published 2019-02-06. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) on pcwin.dll which could cause remote code to be executed when parsing a GD1 file
• CVE-2021-22808, published 2022-01-28. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. A CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by…
• CVE-2021-22807, published 2022-01-28. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. A CWE-787: Out-of-bounds Write vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by…
• CVE-2021-22809, published 2022-01-28. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by…