Description
施耐德电气IGSS中存在越界写入漏洞。此漏洞是由于处理发送到IGSSDataServer.exe进程的Opcode 5 (ONL)消息时出现越界写入导致的。
Schneider Electric IGSS IGSSdataServer.exe Opcode 5 越界写入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.tenable.com/security/research/tra-2022-22
https://igss.schneider-electric.com/security-notification-8-vulnerabilities-fixed-in-igss-data-server-in-v15/
https://www.se.com/ww/en/work/support/cybersecurity/security-notifications/
https://cvepremium.circl.lu/vuln/cve-2022-24324
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.SCADA:SCADA-ELECTRIC-BO.html
https://www.hkcert.org/tc/security-bulletin/schneider-electric-interactive-graphical-scada-system-igss-buffer-overflow-vulnerability
https://jvn.jp/vu/JVNVU94559502/index.html