CVE-2022-24312: Schneider Electric IGSS IGSSdataServer Directory Traversal Remote Code Execution Vulnerability
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by adding at end of file or create a new file in the context of the Data Server potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IGSSDataServer process, which listens on TCP port 12401 by default. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user.
— ZDI
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-24312.
What is the severity of CVE-2022-24312?
The severity of CVE-2022-24312 is critical with a CVSS score of 9.8.
How does CVE-2022-24312 affect Schneider Electric IGSS?
CVE-2022-24312 allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS without requiring authentication.
What software versions are affected by CVE-2022-24312?
Schneider Electric IGSS versions up to and including 15.0.0.22020 are affected by CVE-2022-24312.
How can CVE-2022-24312 be exploited?
CVE-2022-24312 can be exploited by exploiting a directory traversal vulnerability in the IGSSDataServer process, which listens on TCP port 12401.