CVE-2017-7966

CVE-2017-7966 describes an DLL Hijacking/Uncontrolled Search Path Element flaw in Schneider Electric SoMachine HVAC programming software. Affected product: SoMachine HVAC v2.1.0 (and earlier per ICS-CERT) with improper DLL loading enabling arbitrary code execution. NVD notes a network-exploitable...

Schneider Electric SoMachine HVAC

CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Schneider Electric Equipment: SoMachine HVAC Vulnerabilities: Buffer Overflow, DLL Hijack AFFECTED PRODUCTS The following version of SoMachine HVAC, a PLC programming software, is affected: SoMachine HVAC Versions 2.1.0 and prior. IMPACT...