CVE-2021-22802

published 2022-02-11

CVE-2021-22802: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user…

Priority P2 75 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user supplied data, when a constructed message is received on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)

Affected

1 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	interactive_graphical_scada_system_data_collector	<= 15.0.0.21243	—

Detection & IOCs extracted from sources · hover to see the quote

• → Target process is dc.exe (IGSS Data Collector); monitor for network-received constructed messages triggering buffer overflow in dc.exe versions V15.0.0.21243 and prior ↗
• → Monitor for unexpected child processes or code execution spawned from dc.exe, indicating successful exploitation of the buffer overflow ↗

• · Vulnerability is exploitable remotely with no authentication and low attack complexity (CVSS 9.8); affected versions are IGSS Data Collector dc.exe V15.0.0.21243 and prior — fixed in V15.0.0.21244 ↗
• · No known public exploits specifically targeting this vulnerability at time of advisory publication ↗

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-120