CVE-2022-26507
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code execution. This is not the same as any of: CVE-2021-21810, CVE-2021-21811, CVE-2021-21812, CVE-2021-21815, CVE-2021-21825, CVE-2021-21826, CVE-2021-21828, CVE-2021-21829, or CVE-2021-21830. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Se presenta un desbordamiento de búfer en la región heap de la memoria en XML Decompression DecodeTreeBlock en AT&T Labs Xmill versión 0.7. Un archivo de entrada diseñado puede conllevar a una ejecución de código remota. Esto no es lo mismo que cualquiera de: CVE-2021-21810, CVE-2021-21811, CVE-2021-21812, CVE-2021-21815, CVE-2021-21825, CVE-2021-21826, CVE-2021-21828, CVE-2021-21829, o CVE-2021-21830. NOTA: Esta vulnerabilidad sólo afecta a productos que ya no son soportados por el mantenedor
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-03-06 CVE Reserved
- 2022-04-14 CVE Published
- 2024-02-08 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://Claroty.com | Not Applicable | |
| https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-02 | Mitigation |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | Remoteconnect Search vendor "Schneider-electric" for product "Remoteconnect" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Scadapack 470 Search vendor "Schneider-electric" for product "Scadapack 470" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Remoteconnect Search vendor "Schneider-electric" for product "Remoteconnect" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Scadapack 474 Search vendor "Schneider-electric" for product "Scadapack 474" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Remoteconnect Search vendor "Schneider-electric" for product "Remoteconnect" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Scadapack 570 Search vendor "Schneider-electric" for product "Scadapack 570" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Remoteconnect Search vendor "Schneider-electric" for product "Remoteconnect" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Scadapack 574 Search vendor "Schneider-electric" for product "Scadapack 574" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Remoteconnect Search vendor "Schneider-electric" for product "Remoteconnect" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Scadapack 575 Search vendor "Schneider-electric" for product "Scadapack 575" | - | - |
Safe
|
| Att Search vendor "Att" | Xmill Search vendor "Att" for product "Xmill" | 0.7 Search vendor "Att" for product "Xmill" and version "0.7" | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Ecostruxure Control Expert Search vendor "Schneider-electric" for product "Ecostruxure Control Expert" | < 15.1 Search vendor "Schneider-electric" for product "Ecostruxure Control Expert" and version " < 15.1" | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Ecostruxure Control Expert Search vendor "Schneider-electric" for product "Ecostruxure Control Expert" | 15.1 Search vendor "Schneider-electric" for product "Ecostruxure Control Expert" and version "15.1" | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Ecostruxure Process Expert Search vendor "Schneider-electric" for product "Ecostruxure Process Expert" | < 2021 Search vendor "Schneider-electric" for product "Ecostruxure Process Expert" and version " < 2021" | - |
Affected
| ||||||