Approved changes feed: RSS · Atom

cpe:2.3:a:schneider_electric:igss_update_service_(igssupdateservice.exe):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5)
ProductIgss Update Service (Igssupdateservice.Exe) (87798efe-7111-5fb4-aaf1-87021145f762)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4516 vulnerable 2026-06-08 06:16:12.863987 Details available
HIGH (7.8)
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update source, potentially leading to remote code execution when the attacker force an update containing malicious content.
Published: 2023-09-14T08:54:53.673Z
Updated: 2025-02-27T20:52:17.879Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.