Schneider Electric Interactive Graphical SCADA System

An attacker with local access could execute arbitrary code on IGSS systems, potentially altering process data, stopping SCADA monitoring, or crashing the software. This could impact real-time visibility and control of critical infrastructure operations.

Utilities and manufacturers using Schneider Electric IGSS for SCADA monitoring and control should assess this risk. IGSS is typically deployed on engineering workstations, HMI terminals, or supervisory computers in electric generation, transmission, and distribution operations. Energy sector operators relying on IGSS for real-time process visibility are affected.

An attacker must gain local access to a system running IGSS, then convince a user to open a malicious file (likely via social engineering or supply chain compromise). Once opened, the attacker gains code execution with the privileges of the IGSS application, potentially allowing modification of SCADA logic, process setpoints, or shutdown of monitoring.