Schneider Electric Interactive Graphical SCADA System dc.exe Unspecified Buffer Overflow
Critical Nessus Plugin ID 64296
SynopsisThe remote Windows host contains a SCADA application that is affected by a buffer overflow vulnerability.
DescriptionThe installed version of IGSS is 9.x earlier than 188.8.131.5231 / 10.x earlier than 10.0.0.12320. It is, therefore, reportedly affected by an unspecified buffer overflow vulnerability.
By sending specially crafted packets to the dc.exe service on TCP port 12397, an unauthenticated, remote attacker could trigger a buffer overflow resulting in arbitrary code execution or a denial of service condition (service crash).
SolutionUpgrade to IGSS version 184.108.40.20631 / 10.0.0.12320 or later.