First published: Fri Jan 28 2022(Updated: )
A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 (Build 683.003) and prior
Credit: cybersecurity@se.com
Affected Software | Affected Version | How to fix |
---|---|---|
Schneider-electric Guicon | <=2.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-22809 is categorized as a medium severity vulnerability.
To fix CVE-2021-22809, update the Eurotherm GUIcon to the latest version beyond 2.0.
CVE-2021-22809 could lead to unintended data disclosure when a malicious configuration file is loaded.
Eurotherm GUIcon Version 2.0 (Build 683.003) and prior versions are affected by CVE-2021-22809.
CVE-2021-22809 is classified as an Out-of-Bounds Read vulnerability.