Skip to content
OpenAdvisories
Critical ICSA-14-350-01 5 CVEs

Schneider Electric ProClima Command Injection Vulnerabilities

Published Sep 18, 2014 · Updated Jun 6, 2025 · Revision 2

Vendor: Schneider Electric Product: ProClima

Vulnerabilities 5

  • Critical 10.0
    CVE-2014-9188

    Schneider Electric ProClima Command Injection

    Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-8514. NOTE: this may be clari…

    Schneider Electric ProClima ICS / OT
  • Unscored —
    CVE-2014-8511

    Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers …

  • Unscored —
    CVE-2014-8512

    Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers …

  • Unscored —
    CVE-2014-8513

    Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attacker…

  • Unscored —
    CVE-2014-8514

    Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attacker…

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References