Local Schneider Electric Interactive Graphical SCADA System Remote Code Execution Vulnerability.

Interactive Graphical SCADA (IGSS) is full featured automation software - a SCADA system for process control and supervision.

The vulnerability identified is related to two sets of Windows files that can be hijacked.Certain OCX and DLL files are not handled securely when installed in Windows 7 environments.

Affected Versions :
IGSS Software, V12 and previous versions

An attacker who exploits this vulnerability may be able to remotely execute arbitrary code.

Vendor has not confirmed about fixed version. They have suggested workaround to fix this vulnerability. Workaround:
Schneider Electric recommends that users upgrade to Windows 10 to mitigate this vulnerability.