PT-2021-6899 · Schneider Electric · Guicon

Published 2021-11-09 · Updated 2022-02-03 · CVE-2021-22808

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eurotherm by Schneider Electric GUIcon version 2.0 (Build 683.003) and prior

Description A Use After Free vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIcon tool. This issue is related to the handling of memory after it has been freed, specifically when processing *.gd1 configuration files. Exploitation of this vulnerability may allow an attacker to execute arbitrary code.

Recommendations For Eurotherm by Schneider Electric GUIcon version 2.0 (Build 683.003) and prior, consider avoiding the use of *.gd1 configuration files until a patch is available. As a temporary workaround, restrict the loading of *.gd1 files into the GUIcon tool to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2022-02456

CVE-2021-22808

Affected Products

Guicon

References · 8

• https://bdu.fstec.ru/vul/2022-02456 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-22808 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22808 · Vendor Advisory
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-313-07 · Vendor Advisory
• https://cisa.gov/uscert/ics/advisories/icsa-21-313-02 · Note
• https://t.me/cvenotify/26193 · Telegram Post
• https://t.me/cibsecurity/36511 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021111820 · Note