ICSA-19-295-01_Schneider Electric ProClima

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: Proclima Vulnerabilities: Code Injection, Improper Restriction of Operations within the Bounds of a Memory Buffer, Uncontrolled Search Path Element 2. RISK EVALUATION...

CVE-2019-6824

A CWE-119: Buffer Errors vulnerability exists in ProClima all versions prior to version 8.0.0 which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0...

CVE-2019-6824

The CVE-2019-6824 entry concerns Schneider Electric ProClima prior to version 8.0.0, where a CWE-119 Buffer Overflow allows an unauthenticated, remote attacker to execute arbitrary code. Connected sources (ICS advisory ICSA-19-295-01 and CNVD-2019-23784) confirm the affected product, vulnerabilit...