CVE-2021-22804 - AskarLabs CVE Database

CVE-2021-22804

Vendor N/A

Product Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)

Weakness CWE-22 · Path traversal

Published February 11, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files being read in the context of the user running IGSS, due to missing validation of user supplied data in network messages. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)

Key dates

02Disclosure timeline

February 11, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-22804 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Identifiers

CVE CVE-2021-22804

CWE CWE-22

Affected versions

Vendor N/A

Product Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)

Affected Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)