CVE-2019-6825

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima all versions prior to version 8.0.0 which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version...

Code injection

A CWE-94: Code Injection vulnerability exists in ProClima all versions prior to version 8.0.0 which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0...

Path traversal

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima all versions prior to version 8.0.0 which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version...

Buffer overflow

A CWE-119: Buffer Errors vulnerability exists in ProClima all versions prior to version 8.0.0 which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0...

CVE-2019-6825

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima all versions prior to version 8.0.0 which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version...

CVE-2019-6825

CVE-2019-6825 affects Schneider Electric ProClima prior to 8.0.0. It is an Uncontrolled Search Path Element (CWE-427) vulnerability that could allow a malicious DLL with the same name as a resident DLL to execute arbitrary code. The ICSA advisory confirms unauthenticated remote exploitation; CVSS...

CVE-2019-6824

The CVE-2019-6824 entry concerns Schneider Electric ProClima prior to version 8.0.0, where a CWE-119 Buffer Overflow allows an unauthenticated, remote attacker to execute arbitrary code. Connected sources (ICS advisory ICSA-19-295-01 and CNVD-2019-23784) confirm the affected product, vulnerabilit...

CVE-2019-6824

A CWE-119: Buffer Errors vulnerability exists in ProClima all versions prior to version 8.0.0 which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0...

CVE-2019-6823

Schneider Electric ProClima (all versions before 8.0.0) contains a CWE-94 code injection vulnerability (CVE-2019-6823). An unauthenticated, remote attacker could execute arbitrary code due to improper handling of input during code generation. ICSA-19-295-01 notes CVSS v3 base score 9.8 and remote...

CVE-2019-6823

A CWE-94: Code Injection vulnerability exists in ProClima all versions prior to version 8.0.0 which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0...

PT-2019-6020 · Proclima · Proclima

Name of the Vulnerable Software and Affected Versions: ProClima versions prior to 8.0.0 Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code on the targeted system. This can potentially allow an unauthenticated,...

PT-2019-6019 · Proclima · Proclima

Name of the Vulnerable Software and Affected Versions: ProClima versions prior to 8.0.0 Description: The issue is related to incorrect code generation management, allowing a remote attacker to execute arbitrary code on the targeted system. This can be exploited by an unauthenticated, remote...

PT-2019-6001 · Proclima · Proclima

Name of the Vulnerable Software and Affected Versions: ProClima versions prior to 8.0.0 Description: A vulnerability exists in the software that could allow a malicious DLL file, with the same name as any resident DLLs inside the software installation, to execute arbitrary code. This issue is...

schneider Proclima suffers from dll hijacking vulnerability

schneider Proclima is a thermal calculation software. A dll hijacking vulnerability exists in schneider Proclima. An attacker can load a malicious dll and execute malicious code...

Schneider Electric ProClima < 6.1.7 Multiple Vulnerabilities

Binary data 9973.prm...

Schneider Electric ProClima F1BookView Memory Corruption (CVE-2015-7918; CVE-2015-8561)

A memory corruption vulnerability has been reported in Schneider Electric ProClima. The vulnerability is due to a flaw in some methods of the F1BookView ActiveX control. A remote, unauthenticated attacker could exploit this vulnerability by enticing a victim user to browse to a maliciously crafte...

Schneider Electric ProClima Application Detection

Binary data 9048.prm...

Schneider Electric ProClima Version Detection

Binary data 9047.prm...

Schneider Electric ProClima < 6.2 Multiple Vulnerabilities

Binary data 9037.prm...

Schneider Electric ProClima Denial of Service Vulnerability

Schneider Electric ProClima is a thermal calculation software from Schneider Electric France. A denial of service vulnerability exists in Schneider Electric ProClima versions prior to 6.2. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted integer valu...