NetSight
critical9.8

CVE-2021-22802

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user suppl…

Impact

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user supplied data, when a constructed message is received on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)

Affected products

VendorProductAffected versions
Schneider-ElectricInteractive Graphical Scada System Data Collector
through 15.0.0.21243

Weakness classification

References