Buffer overflow

Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8512. NOTE: this may be clarified later based on details provided by researchers...

CVE-2014-8512

Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8511. NOTE: this may be clarified later based on details provided by researchers...

CVE-2014-8512

CVE-2014-8512 affects Schneider Electric ProClima (ATX45) via the Atx45.ocx ActiveX control. The vulnerability is a buffer overflow in the control before version 6.1.7 that could allow remote arbitrary code execution via unspecified vectors. Documented in multiple sources (e.g., ZDI advisories fo...

Schneider Electric ProClima Command Injection Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from HP’s Zero Day Initiative ZDI concerning command injection vulnerabilities in Schneider Electric’s ProClima software package. These vulnerabilities were reported to ZDI by security researchers Ariele Caltabiano, Andrea Micalizzi, and Brian Gorenc...