Vulnerability · Published Feb 1, 2023 · Assigned by schneider
CVE-2022-2329
Critical 9.8
In plain English
A critical-severity integer overflow in IGSS Data Server (IGSSdataServer.exe) from Schneider Electric. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 82% of all known vulnerabilities).
Official description
A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22073)
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | IGSS Data Server (IGSSdataServer.exe) | All – before V15.0.0.22073 |
Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H