CVE-2022-24313

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

VendorProductVersions
n/aInteractive Graphical SCADA System Data Server (V15.0.0.22020 and prior)Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)

References

Timeline

Published
Feb 9, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-243147.5A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attackerCVE-2022-243157.5A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted CVE-2022-243167.5A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted mesCVE-2022-243177.5A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message. AffecCVE-2022-243187.5A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated veCVE-2022-243195.9A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the cCVE-2022-24324.3The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.10.23CVE-2022-243205.9A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the cCVE-2022-243217.5A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADCVE-2022-243225.9A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of comCVE-2022-243235.9A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between CVE-2022-243249.8A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leadin
CVE-2022-24313: Critical severity, CVSS 9.8 | Vulnix