Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-7918
HistoryDec 15, 2015 - 5:59 a.m.

CVE-2015-7918

2015-12-1505:59:08
CWE-119
[email protected]
web.nvd.nist.gov
28
cve-2015-7918
buffer overflow
f1bookview
activex control
schneider electric proclima
remote code execution
vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.443 Medium

EPSS

Percentile

97.4%

JSON

Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561.

Affected configurations

NVD
Node
schneider-electricproclimaRange≤6.1

Related

checkpoint_advisories 1
cvelist 2
nvd 2
prion 2
cve 1
ics 1
zdi 11
checkpoint_advisories
checkpoint_advisories
Schneider Electric ProClima F1BookView Memory Corruption (CVE-2015-7918; CVE-2015-8561)
2016-02-15 00:00:00
cvelist
cvelist
CVE-2015-7918
2015-12-15 02:00:00
CVE-2015-8561
2022-10-03 16:16:00
nvd
nvd
CVE-2015-8561
2015-12-15 05:59:09
CVE-2015-7918
2015-12-15 05:59:08
prion
prion
Memory corruption
2015-12-15 05:59:00
Buffer overflow
2015-12-15 05:59:00
cve
cve
CVE-2015-8561
2022-10-03 16:16:00
ics
ics
Schneider Electric ProClima ActiveX Control Vulnerabilities
2018-08-27 12:00:00
zdi
zdi
Schneider Electric ProClima F1BookView ActiveX Control DefinedName Method Remote Code Execution Vulnerability
2015-12-08 00:00:00
Schneider Electric ProClima F1BookView ActiveX Control DefinedNameLocal Method Remote Code Execution Vulnerability
2015-12-08 00:00:00
Schneider Electric ProClima F1BookView ActiveX Control SetTabbedTextEx Method Remote Code Execution Vulnerability
2015-12-08 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.443 Medium

EPSS

Percentile

97.4%

JSON
Related for CVE-2015-7918
checkpoint_advisories1cvelist2nvd2prion2cve1ics1zdi11