https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:51:49.351795+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-443 certfr-2021-avi-443 — De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Certaines d'entre elles permetten… 2026-10-02T20:51:49.356558+00:00 certfr-2021-avi-443 https://cve.radiocsirt.org/vuln/cnvd-2021-42155 cnvd-2021-42155 2026-10-02T20:51:49.356590+00:00 cnvd-2021-42155 https://cve.radiocsirt.org/vuln/euvd-2026-23084 EUVD-2026-23084 2026-10-02T20:51:49.356605+00:00 EUVD-2026-23084 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22754 fkie_cve-2021-22754 2026-10-02T20:51:49.356617+00:00

A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack of proper validation of user-supplied data, when a malicious CGF file is imported to IGSS Definition.

 https://cve.radiocsirt.org/vuln/ghsa-2jvj-298c-h5x3 GHSA-2jvj-298c-h5x3 2026-10-02T20:51:49.356642+00:00

A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack of proper validation of user-supplied data, when a malicious CGF file is imported to IGSS Definition.

 https://cve.radiocsirt.org/vuln/gsd-2021-22754 gsd-2021-22754 2026-10-02T20:51:49.356658+00:00 gsd-2021-22754 https://cve.radiocsirt.org/vuln/icsa-21-159-04 ICSA-21-159-04 — Schneider Electric IGSS 2026-10-02T20:51:49.356668+00:00

Exploitation of this vulnerability could result in loss of data or remote code execution due to missing length checks when a malicious CGF file is imported to IGSS Definition.CVE-2021-22750 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Exploitation of this vulnerability could result in disclosure of information or execution of arbitrary code due to lack of input validation when a malicious CGF (Configuration Group File) is imported to IGSS Definition.CVE-2021-22751 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Exploitation of this vulnerability could result in loss of data or remote code execution due to missing size checks when a malicious WSP (Workspace) file is being parsed by IGSS Definition.CVE-2021-22752 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been assigned; the CVSS vector string is AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Exploitation of this vulnerability could result in loss of data or remote code execution due to missing length checks when a malicious WSP file is being parsed by IGSS Definition.CVE-2021-22753 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Exploitation of this vulnerability could result in loss of data or…

 https://cve.radiocsirt.org/vuln/sevd-2021-159-01 SEVD-2021-159-01 — IGSS (Interactive Graphical SCADA System) 2026-10-02T20:51:49.356711+00:00

Schneider Electric is aware of multiple vulnerabilities in the Interactive Graphical SCADA System (IGSS) product. The IGSS product is a state-of-the art SCADA system used for monitoring and controlling industrial processes. IGSS communicates with all major industry standard PLC drivers. Failure to apply the remediations provided below may risk remote code execution, which could result in an attacker gaining access to the Windows Operating System on the machine used to import CGF and WSP files, typically a step performed during system design time.