CVE-2022-24310 - A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages

Back Back to CVE browser

CRITICAL

A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages

Published Feb 9, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 2.23%

Description

A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)

Affected products

Vendor n/a Product Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) Default
n/a
- Version
  Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)

n/a

Version	Status	Constraints
Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (2)

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01
x_refsource_MISCPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-29208
Advisory

Link	Providers	Tags
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01		x_refsource_MISCPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-29208		Advisory