CVE-2022-2329

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22073)

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
Schneider ElectricIGSS Data Server (IGSSdataServer.exe)>= All, < V15.0.0.22073

References

Timeline

Published
Feb 1, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-232907.8Windows Inking COM Elevation of Privilege VulnerabilityCVE-2022-232917.8Windows DWM Core Library Elevation of Privilege VulnerabilityCVE-2022-232923.7Microsoft Power BI Spoofing VulnerabilityCVE-2022-232937.8Windows Fast FAT File System Driver Elevation of Privilege VulnerabilityCVE-2022-232948.8Windows Event Tracing Remote Code Execution VulnerabilityCVE-2022-232957.8Raw Image Extension Remote Code Execution VulnerabilityCVE-2022-232967.8Windows Installer Elevation of Privilege VulnerabilityCVE-2022-232975.5Windows NT Lan Manager Datagram Receiver Driver Information Disclosure VulnerabilityCVE-2022-232987.0Windows NT OS Kernel Elevation of Privilege VulnerabilityCVE-2022-232997.8Windows PDEV Elevation of Privilege VulnerabilityCVE-2022-23306.5Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker tCVE-2022-233007.8Raw Image Extension Remote Code Execution Vulnerability
CVE-2022-2329: Critical severity, CVSS 9.8 | Vulnix