CVE-2021-22758
A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack validation of user-supplied input data, when a malicious CGF file is imported to IGSS Definition.
Date published : 2021-06-11
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01