CVE-2019-6825

2019-07-1520:45:14

CWE-427

schneider

www.cve.org

0.001 Low

EPSS

Percentile

31.4%

JSON

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version 8.0.0.

CNA Affected

[
  {
    "product": "ProClima all versions prior to version 8.0.0",
    "vendor": "ProClima",
    "versions": [
      {
        "status": "affected",
        "version": "ProClima all versions prior to version 8.0.0"
      }
    ]
  }
]

References

www.schneider-electric.com/en/download/document/SEVD-2019-162-01/

0.001 Low

EPSS

Percentile

31.4%

JSON

Related for CVELIST:CVE-2019-6825