Schneider Electric Interactive Graphical Scada System Data Server vulnerabilities

8 CVEs affecting Schneider Electric Interactive Graphical Scada System Data Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-24317, published 2022-02-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-24313, published 2022-02-09. Critical severity, CVSS 9.8. EPSS: 44.6% chance of exploitation in the next 30 days. A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a…
CVE-2022-24315, published 2022-02-09. High severity, CVSS 7.5. EPSS: 19.3% chance of exploitation in the next 30 days. A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA…
CVE-2022-24314, published 2022-02-09. High severity, CVSS 7.5. EPSS: 18.2% chance of exploitation in the next 30 days. A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeatedly sends a specially crafted message. Affected…
CVE-2022-24311, published 2022-02-09. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by inserting at beginning of file or create a new file in…
CVE-2022-24312, published 2022-02-09. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by adding at end of file or create a new file in the…
CVE-2022-24310, published 2022-02-09. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends…
CVE-2022-24316, published 2022-02-09. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System…
CVE-2022-24317, published 2022-02-09. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message. Affected Product: Interactive Graphical SCADA System Data Server…