| Package | Affected versions | Patched versions |
|---|---|---|
| interactive graphical scada system | ≥ 14.0, < 14.0.0.20009 | 14.0.0.20009 |
A CWE-306: Missing Authentication for Critical Function vulnerability exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow a local user to execute processes that otherwise require escalation privileges when sending local network commands to the IGSS Update Service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free