CVE-2022-24310

CRITICAL 9.8CVE-2022-24310 · Published 09/02/2022 · updated 17/06/2026

In short

CVE-2022-24310 is a CRITICAL (CVSS 9.8) vulnerability affecting interactive graphical scada system data server (schneider-electric).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
interactive graphical scada system data server schneider-electric	`≤ 15.0.0.22020`	No fix yet

Description

A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)

References

download.schneider-electric.com/files · Patch

More vulnerabilities in interactive graphical scada system data server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2022-24310 is a CRITICAL (CVSS 9.8) vulnerability affecting interactive graphical scada system data server (schneider-electric).

Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.7% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

interactive graphical scada system data server

schneider-electric

≤ 15.0.0.22020

No fix yet

Description

More vulnerabilities in interactive graphical scada system data server

See all →