CVE-2016-4529

Schneider Electric SoMachine HVAC programming software for M171/M172 Controllers contains an unsafe ActiveX control (AxEditGrid) with a SetDataIntf dereference vulnerability. The flaw allows remote code execution via an attacker-supplied memory address in the untrusted pointer dereference within ...

PT-2016-6003

Name of the Vulnerable Software and Affected Versions Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers versions prior to 2.1.0 Description The issue allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFE FOR UNTRUSTED...

CVE-2016-4529: Undefined Security Weakness

An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFEFORUNTRUSTEDCALLER aka safe for scripting flag...