Schneider Electric IGSS SCADA Software

Risk Summary

Successful exploitation of these vulnerabilities could result in unauthorized access to sensitive data and functions.

CVEs (2)

Remediations

• Schneider Electric has provided IGSS14 Version 14.0.0.20009 to address these vulnerabilities. Users are recommended to update to IGSS Version 14.
• Alternatively, the following workarounds and mitigations can be applied to reduce risk:
• Disable the IGSS Update service when it is not required installing updates using the service.
• Keep the infrastructure offline and do not allow Windows login and network access for untrusted people and sources.
• For more information, see the Schneider Electric security notification.

Affected Vendors

Affected Products (1)

Affected Sectors

Commercial Facilities, Critical Manufacturing, Energy