schneider-electric somachine hvac vulnerabilities and exploits

(subscribe to this query)

NA

A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC (Versions prior to V2.1.0), EcoStruxure Machine Expert – HVAC (Versions ...

Schneider-electric Somachine Hvac Schneider-electric Ecostruxure Machine Expert - Hvac

605

VMScore

A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and previous versions versions, which could cause arbitrary code execution on the system running SoMachine HVAC when a malicious DLL library is loaded by the product.

Schneider-electric Somachine Hvac

409

VMScore

A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller.

Schneider-electric Somachine Hvac 2.1.0

605

VMScore

A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote malicious user to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a DLL.

Schneider-electric Somachine 2.1.0

668

VMScore

An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers prior to 2.1.0 allows remote malicious users to execute arbitrary code via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting...

Schneider-electric Somachine Hvac Firmware

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook