Lucene search

K

Somachine Security Vulnerabilities

cve
cve

CVE-2022-2988

A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC (Versions prior to V2.1.0), EcoStruxure Machine Expert – HVAC (Versions prior to...

7.5CVSS

7.3AI Score

0.001EPSS

2023-01-30 11:15 AM
16
cve
cve

CVE-2020-28220

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 Firmware (All versions prior to V5.0.4.11) and SoMachine/SoMachine Motion software (All versions), that could cause a buffer overflow when the length of a file transferred to the....

6.8CVSS

6.8AI Score

0.0005EPSS

2020-12-11 01:15 AM
46
2
cve
cve

CVE-2020-7487

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258...

9.8CVSS

9.4AI Score

0.002EPSS

2020-04-22 07:15 PM
31
cve
cve

CVE-2020-7488

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258...

7.5CVSS

7.3AI Score

0.002EPSS

2020-04-22 07:15 PM
23
cve
cve

CVE-2019-6826

A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier versions, which could cause arbitrary code execution on the system running SoMachine HVAC when a malicious DLL library is loaded by the...

7.8CVSS

8.2AI Score

0.001EPSS

2019-09-17 08:15 PM
88
cve
cve

CVE-2018-7783

Schneider Electric SoMachine Basic prior to v1.6 SP1 suffers from an XML External Entity (XXE) vulnerability using the DTD parameter entities technique resulting in disclosure and retrieval of arbitrary data on the affected node via out-of-band (OOB) attack. The vulnerability is triggered when...

7.5CVSS

7.5AI Score

0.002EPSS

2018-07-03 02:29 PM
23
cve
cve

CVE-2017-7965

A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172...

7.3CVSS

8.9AI Score

0.0004EPSS

2017-06-07 07:29 PM
28
cve
cve

CVE-2017-7966

A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a...

8.8CVSS

8.8AI Score

0.011EPSS

2017-06-07 07:29 PM
22
cve
cve

CVE-2017-7574

Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a password. This XML...

9.8CVSS

9.3AI Score

0.006EPSS

2017-04-06 09:59 PM
38
cve
cve

CVE-2014-9200

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM.....

8.2AI Score

0.182EPSS

2015-02-01 03:59 PM
34
cve
cve

CVE-2013-0662

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application...

7.5AI Score

0.115EPSS

2014-04-01 06:17 AM
74