Schneider Electric Interactive Graphical SCADA System 缓冲区错误漏洞

漏洞信息详情

Schneider Electric Interactive Graphical SCADA System（IGSS）是法国施耐德电气（Schneider Electric）公司的一套用于监控和控制工业过程的SCADA（数据采集与监控系统）系统。

Schneider Electric IGSS 14及之前版本中存在缓冲区错误漏洞。攻击者可借助特制的项目文件利用该漏洞造成软件崩溃。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://www.schneider-electric.com/en/download/document/SEVD-2019-190-02/

来源:download.schneider-electric.com

链接:https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2019-190-02-IGSS.pdf&p_Doc_Ref=SEVD-2019-190-02

来源:www.schneider-electric.com

链接:http://www.schneider-electric.com/products/ww/en/

来源:www.schneider-electric.com

链接:https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-02

来源:www.securityfocus.com

链接:https://www.securityfocus.com/bid/109150

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-6827

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.2580/

来源:www.us-cert.gov

链接:https://www.us-cert.gov/ics/advisories/icsa-19-192-06

来源:www.zerodayinitiative.com

链接:https://www.zerodayinitiative.com/advisories/ZDI-19-671/

暂无

Schneider Electric Interactive Graphical SCADA System 缓冲区错误漏洞的修复措施