CVE-2013-0657 Memory corruption in n/a
Remote attackers can execute arbitrary code on Schneider Electric IGSS SCADA systems via malformed TCP packets, posing a critical risk to industrial control environments.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-0657?
CVE-2013-0657 is a critical memory corruption vulnerability in n/a, published on 21 Jan 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol.
Weakness: CWE-119
Which versions are affected by CVE-2013-0657?
It affects 1 product.
Products include Schneider-Electric Interactive Graphical Scada System.
How do I fix CVE-2013-0657?
No fix has been published for CVE-2013-0657 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2013-0657 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2013-0657 exists.
Public exploit code: 2 Exploit-DB entries.
Other vulnerabilities in n/a
- CVE-2022-2329 Integer overflow in IGSS Data Server (IGSSdataServer.exe)
- CVE-2022-24324 Memory corruption in IGSS Data Server (IGSSdataServer.exe)
- CVE-2022-32522 Memory corruption in IGSS Data Server (IGSSdataServer.exe)
- CVE-2022-32523 Memory corruption in IGSS Data Server (IGSSdataServer.exe)
- CVE-2022-32524 Memory corruption in IGSS Data Server (IGSSdataServer.exe)
Sources
Also known as GHSA-qw55-52cc-p8hc.