ZDI-CAN-19420: ZDI-23-341: Schneider Electric IGSS openReport Improper Input Validation Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19420?
The severity of ZDI-CAN-19420 is high due to the potential for remote code execution.
How do I fix ZDI-CAN-19420?
To fix ZDI-CAN-19420, ensure that your Schneider Electric IGSS is updated to the latest version with all security patches applied.
Who is affected by ZDI-CAN-19420?
ZDI-CAN-19420 affects installations of Schneider Electric IGSS that are not fully updated.
What type of vulnerability is ZDI-CAN-19420?
ZDI-CAN-19420 is a remote code execution vulnerability that requires user interaction.
What actions should I take if I am impacted by ZDI-CAN-19420?
If impacted by ZDI-CAN-19420, you should immediately apply available patches and educate users about the risks of visiting unknown pages or files.