CVE-2022-24317

Description

References

• download.schneider-electric.com/files · Patch
• zerodayinitiative.com/advisories/ZDI-22-324 · Patch

Weitere Schwachstellen in interactive graphical scada system data server

• CVE-2022-24316HOCH 7.5A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted mes…
• CVE-2022-24315HOCH 7.5A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted …
• CVE-2022-24314HOCH 7.5A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker…
• CVE-2022-24313KRITISCH 9.8A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leadin…
• CVE-2022-24312KRITISCH 9.8A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file…