PT-2021-15197 · Unknown · Igss Definition

Published 2021-06-11 · Updated 2021-06-15 · CVE-2021-22759

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IGSS Definition (Def.exe) versions 15.0.0.21140 and prior

Description A use after free issue exists due to the use of unchecked input data when a malicious CGF file is imported, potentially resulting in loss of data or remote code execution.

Recommendations For versions 15.0.0.21140 and prior, consider restricting the import of CGF files from untrusted sources until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2021-22759

Affected Products

Igss Definition

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-22759 · Security Note
• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-22759 · Vendor Advisory
• https://t.me/cvenotify/16214 · Telegram Post