Schneider Electric IGSS

Risk Summary

Successful exploitation of these vulnerabilities may result in remote code execution, which could result in an attacker gaining access to the Windows Operating System on the machine used to import CGF and WSP files.

CVEs (13)

Remediations

• Schneider Electric recommends users update to Version 15.0.0.21141 of the IGSS Definition module: Def.exe includes fixes for these vulnerabilities and is available for download through IGSS Master > Update IGSS Software, or at the link above.
• If users choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploitation:
• Avoid importing CGF and WSP files from untrusted sources.
• Please see Schneider Electric's publication SEVD-2021-159-01 for more information.

Affected Vendors

Affected Products (1)

Affected Sectors

Commercial Facilities, Critical Manufacturing, Energy