Schneider.Electric.Interactive.Graphical.SCADA.Buffer.Overflow

Description

This indicates an attack attempt against a Buffer Overflow vulnerability in Schneider Electric's Interactive Graphical SCADA System (IGSS) application.
The vulnerability is caused by an integer underflow, in which leads to stack buffer overflow, when processing crafted input from ports 12397/TCP and 12399/TCP. It allows a remote attacker to gain control of the vulnerable system.

Affected Products

Schneider Electric Interactive Graphical SCADA System 10.x
Schneider Electric Interactive Graphical SCADA System 9.x

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
http://www2.schneider-electric.com/corporate/en/support/cybersecurity/viewer-news.page?c_filepath=/
templatedata/Content/News/data/en/local/cybersecurity/general_information/2013/01/
20130110_advisory_of_vulnerability_affecting_igss_scada_software.xml

References