Which versions of Schneider IGSS are affected by EUVD-2026-50304?

Schneider Electric IGSS (Interactive Graphical SCADA System) contains a high-severity out-of-bounds write vulnerability (CVE-2026-12927, CVSS 8.4) that can lead to memory corruption, data loss, and…

How to fix or mitigate EUVD-2026-50304?

Within 24 hours, identify all systems running Schneider Electric IGSS across the organization and implement immediate operational controls: restrict user permissions for file imports from untrusted sources, disable automatic CGF file imports if available, and communicate a security advisory to all IGSS operators warning against opening files from unknown or suspicious sources. Over the next 7 days, audit recent IGSS configuration changes to detect any signs of compromise and enforce a formal approval workflow for all CGF file imports, requiring technical review before any import occurs. Within 30 days, monitor Schneider Electric PSIRT advisories for potential security updates and evaluate upgrade paths to patched versions; contact Schneider Electric support to confirm current version status and roadmap for security remediations.

Schneider IGSS EUVD-2026-50304

Q: What is the CVSS score of EUVD-2026-50304?

EUVD-2026-50304 has a CVSS 4.0 base score of 8.4 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

| CVE-2026-12927 HIGH

Out-of-bounds Write (CWE-787)

2026-07-29 cybersecurity@se.com

GHSA-j7pp-7hqf-vrpv

RCE Buffer Overflow Memory Corruption

8.4

CVSS 4.0 · Vendor: se

Severity by source

Vendor (se) PRIMARY

8.4 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.8 HIGH

Local file-import trigger forces AV:L and UI:R; no privileges needed once opened (PR:N); memory corruption yields full C/I/A impact with unchanged scope.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (se).

CVSS VectorVendor: se

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Analysis Generated

Jul 29, 2026 - 13:30 vuln.today

CVE Published

Jul 29, 2026 - 13:17 cve.org

HIGH 8.4

DescriptionCVE.org

CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS Definition.

AnalysisAI

Out-of-bounds write in Schneider Electric IGSS (Interactive Graphical SCADA System) Definition module allows an attacker to corrupt memory - causing data loss or potential arbitrary code execution - when a victim imports a maliciously crafted CGF (configuration/definition) file. Exploitation is local and hinges on user interaction (opening/importing the file), with no authentication required once the operator is tricked. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the vendor (Schneider Electric PSIRT) rates the flaw high at CVSS 8.4.

Technical ContextAI

IGSS is Schneider Electric's SCADA platform used to build and run supervisory control HMIs for industrial processes; the affected component is the IGSS Definition (configuration design) environment that parses CGF definition files. The root cause is CWE-787 (Out-of-bounds Write): the CGF file parser fails to validate size or bounds of imported data before writing it into a memory buffer, so crafted field lengths or offsets in the file drive writes past the allocated buffer. This class of memory-corruption bug (consistent with the reporter's 'Buffer Overflow / Memory Corruption' tags) can overwrite adjacent heap/stack structures, which at minimum crashes the application (loss of engineering data) and at worst allows control-flow hijacking for code execution in the context of the IGSS engineering workstation.

RemediationAI

Apply the fixed IGSS version distributed by Schneider Electric as described in advisory SEVD-2026-195-01 (https://download.se.com/files?p_Doc_Ref=SEVD-2026-195-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-195-01.pdf) - patch available per vendor advisory, but no exact fixed version string was provided in the input, so verify the target build in that document before deploying. Until patched, the practical compensating controls are procedural: do not import CGF definition files from untrusted or unverified sources, restrict engineering-workstation access so only trusted operators can open project/definition files, and validate file provenance/hashes before import (trade-off: slows legitimate configuration exchange between engineers). Because the vector is local file import, network-level blocks offer little help; the highest-value control is application allow-listing and file-handling hygiene on IGSS engineering hosts, plus keeping those hosts off general-purpose internet/email use to reduce the chance an operator receives a malicious CGF file.