Schneider-Electric Igss Data Server
8 CVEs affecting Schneider-Electric Igss Data Server. Latest disclosed: 2023-03-21. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-27982 | High | 8.8 | 2023-03-21 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS… |
CVE-2023-27980 | High | 8.8 | 2023-03-21 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow the creation of a malicious repo… |
CVE-2023-27984 | High | 7.8 | 2023-03-21 | A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to remote code executio… |
CVE-2023-27981 | High | 7.8 | 2023-03-21 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a vi… |
CVE-2023-27978 | High | 7.8 | 2023-03-21 | A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potenti… |
CVE-2023-27983 | Medium | 6.5 | 2023-03-21 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow deletion of reports from the IGS… |
CVE-2023-27979 | Medium | 6.5 | 2023-03-21 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the renaming of files in the IGSS project re… |
CVE-2023-27977 | Medium | 6.5 | 2023-03-21 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project r… |