schneider Alert
2015Warning Date
Severity Level
Warning Number
Target Sector
12 September, 2023
● High
2023-5787
All
Description:
Schneider Electric has released security update to address several vulnerabilities in the following product:
- IGSS Update Service (IGSSupdateservice.exe)
- v16.0.0.23211 and prior
Threats:
An attacker could exploit these vulnerabilities by doing the following:
- Remote Code Execution
Best practice and Recommendations:
The CERT team encourages users to review Schneider Electric security advisory and update the affected product:
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-255-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-255-01.pdf