Описание
A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a DLL.
Ссылки
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:schneider-electric:somachine:2.1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.00975
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-427
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a DLL.
EPSS
Процентиль: 76%
0.00975
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-427