PT-2022-2280
CVE-2022-24313
·
Published
2022-02-08
·
Updated
2022-02-17
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior
Description
The issue is caused by a stack-based buffer overflow due to a buffer copy without checking the size of the input. This could potentially lead to remote code execution when an attacker sends a specially crafted message.
Recommendations
For versions V15.0.0.22020 and prior, update to a version that fixes the buffer overflow issue to prevent remote code execution.
As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾