CVE-2013-0657

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 21.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-01-21 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol.

Affected products

Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior: through 10.0; 9.0

References

http://igss.schneider-electric.com/igss/igssupdates/v100/progupdatesv100.zip
http://igss.schneider-electric.com/igss/igssupdates/v90/progupdatesv90.zip
http://www.us-cert.gov/control_systems/pdf/ICSA-13-018-01.pdf
https://www.exploit-db.com/exploits/45218/
http://igss.schneider-electric.com/igss/igssupdates/v100/progupdatesv100.zip
http://igss.schneider-electric.com/igss/igssupdates/v90/progupdatesv90.zip
http://www.us-cert.gov/control_systems/pdf/ICSA-13-018-01.pdf
https://www.exploit-db.com/exploits/45218/

Get alerted when CVE-2013-0657 or the next vulnerability affects your stack