Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-22760
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing checks of user-supplied input data, when a malicious CGF file is imported to IGSS Definition.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
对无效指针或索引的释放
Source: NVD (National Vulnerability Database)
Vulnerability Title
IGSS Definition 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IGSS Definition是一个系统设计者使用的主要程序。该程序旨在帮助系统设计人员执行以下任务： 通过使用过程图构建受监控过程的模型。通过指定其唯一的 PLC 地址，将 IGSS 连接到物理过程组件。 IGSS Definition存在安全漏洞，该漏洞由于缺少对用户提供的输入数据的检查，利用此漏洞可能导致数据丢失或远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
-IGSS Definition (Def.exe) V15.0.0.21140 and prior IGSS Definition (Def.exe) V15.0.0.21140 and prior -
II. Public POCs for CVE-2021-22760
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2021-22760
Please Login to view more intelligence information
New Vulnerabilities
Product: IGSS Definition (Def.exe) V15.0.0.21140 and prior
Vendor: n/a
Same weakness: CWE-763
V. Comments for CVE-2021-22760

No comments yet

Leave a comment