Schneider Electric Interactive Graphical SCADA System Buffer Overflow Vulnerability (CNVD-2022-13069)

Schneider Electric Interactive Graphical SCADA System (IGSS) is a SCADA (data acquisition and monitoring system) system for monitoring and controlling industrial processes from Schneider Electric, France. The Schneider Electric Interactive Graphical SCADA System is vulnerable to a buffer overflow vulnerability that originates when a networked system or product does not properly validate data boundaries when performing an operation in memory, resulting in an incorrect read or write operation to an associated other memory location, which could be exploited to send a carefully constructed message to trigger remote code execution .