CVE-2022-24316

Description

References

• download.schneider-electric.com/files · Patch
• zerodayinitiative.com/advisories/ZDI-22-323 · Patch

More vulnerabilities in interactive graphical scada system data server

• CVE-2022-24317HIGH 7.5A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message. Affec…
• CVE-2022-24315HIGH 7.5A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted …
• CVE-2022-24314HIGH 7.5A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker…
• CVE-2022-24313CRITICAL 9.8A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leadin…
• CVE-2022-24312CRITICAL 9.8A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file…