CVE-2022-24316 - A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted message

Back Back to CVE browser

HIGH

A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted message

Published Feb 9, 2022

7.5

HIGH

CVSS 3.1

EPSS 1.27%

Description

A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)

Affected products

Vendor n/a Product Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) Default
n/a
- Version
  Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)

n/a

Version	Status	Constraints
Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-665

References (2)

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01
x_refsource_MISCPatchVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-323/
x_refsource_MISCPatchThird Party Advisory

Link	Providers	Tags
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01		x_refsource_MISCPatchVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-323/		x_refsource_MISCPatchThird Party Advisory