High ICSA-17-136-02 2 CVEs

Schneider Electric SoMachine HVAC

Published May 16, 2017 · Updated May 16, 2017

Vendor: Schneider Electric Product: SoMachine HVAC

Summary

ATTENTION: Low skill level to exploit

Vulnerabilities 2

Unscored —

CVE-2017-7965

A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoM…

Schneider Electric SoMachine HVAC Programming Software ICS / OT

Jun 7, 2017
Unscored —

CVE-2017-7966

A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote…

Schneider Electric SoMachine HVAC Programming Software ICS / OT

Jun 7, 2017

Revision history

2017-05-16 #1
ICSA-17-136-02 Schneider Electric SoMachine HVAC

References

ICS Advisory ICSA-17-136-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-136-02
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-136-02