Schneider Electric IGSS Data Server 15.0.0.22073 Alarm Cache Data Message IGSSdataServer.exe stack-based overflow

Summaryinfo

A vulnerability marked as critical has been reported in Schneider Electric IGSS Data Server. This vulnerability affects unknown code of the file IGSSdataServer.exe of the component Alarm Cache Data Message Handler. Performing a manipulation results in stack-based overflow. This vulnerability was named CVE-2022-32527. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as very critical, was found in Schneider Electric IGSS Data Server (SCADA Software). This affects an unknown code of the file IGSSdataServer.exe of the component Alarm Cache Data Message Handler. The manipulation with an unknown input leads to a stack-based overflow vulnerability. CWE is classifying the issue as CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted alarm cache data messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)

The weakness was presented 01/31/2023 as SEVD-2022-165-01. It is possible to read the advisory at download.schneider-electric.com. This vulnerability is uniquely identified as CVE-2022-32527 since 06/07/2022. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 05/29/2026).

Upgrading to version 15.0.0.22170 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2022-35598). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• SCADA Software

Vendor

• Schneider Electric

Name

• IGSS Data Server

Version

• 15.0.0.22073

License

• commercial

Website

• Vendor: https://www.schneider-electric.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion