Schneider Electric IGSS
Schneider Electric is aware of a vulnerability in its IGSS Definition module for the IGSS (Interactive Graphical SCADA System) product. The [IGSS](https://igss.schneider-electric.com/) product is a state-of-the-art SCADA system used for monitoring and controlling industrial processes. The IGSS Definition module is a design-time component used by system integrators to create mimic diagrams for plant personnel, enabling them to monitor and control the SCADA system. Failure to apply the remediation provided below may risk loss of data or arbitrary code execution, which could result in the loss of control of the system.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-12927US | — | — | ||
CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS Definition… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Out-of-Bounds Write vulnerability in IGSS - SEVD-2026-195-01 PDF Versionself
- Out-of-Bounds Write vulnerability in IGSS - SEVD-2026-195-01 CSAF Versionself
- ICS Advisory ICSA-26-211-04 JSONself
- ICS Advisory ICSA-26-211-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationIGSS Definition (Def.exe) module version 18.0.0.26124 and prior default component of IGSS
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Avoid executing commands, importing or opening files from untrusted sources.
- BehobenIGSS Definition (Def.exe) module version 18.0.0.26124 and prior default component of IGSS
Version 18.0.0.26125 of the IGSS Definition module includes a fix for this vulnerability and is available for download through IGSS Master > Update IGSS Software or here: https://igss.schneider-electric.com/igss/igssupdates/v180/IGSSUPDATE.ZIP
https://igss.schneider-electric.com/igss/igssupdates/v180/IGSSUPDATE.ZIP
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan