CVE-2022-24324

Name of the Vulnerable Software and Affected Versions IGSS Data Server - IGSSdataServer.exe versions prior to V15.0.0.22073

Description A buffer copy without checking the size of the input issue exists, potentially leading to a stack-based buffer overflow and remote code execution when an attacker sends a specially crafted message. This could allow a remote attacker to execute arbitrary code.

Recommendations For versions prior to V15.0.0.22073, update to version V15.0.0.22073 or later to resolve the issue. As a temporary workaround, consider restricting access to the IGSSdataServer.exe module to minimize the risk of exploitation.