CVE-2021-22808

published 2022-01-28

CVE-2021-22808: A CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIcon…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 (Build 683.003) and prior

Affected

1 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	guicon	<= 2.0	—

CWE-416