CVE-2013-0657

Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

21.26% chance of exploitation in the next 30 days, 98th percentile

Published

2013-01-21

Updated

2024-08-06

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/17352
• https://www.exploit-db.com/exploits/45218

Security advisories

• http://igss.schneider-electric.com/igss/igssupdates/v100/progupdatesv100.zip
• http://igss.schneider-electric.com/igss/igssupdates/v90/progupdatesv90.zip
• http://www.us-cert.gov/control_systems/pdf/ICSA-13-018-01.pdf

References

• CVE Record
• NVD entry