Critical ICSA-19-295-01 3 CVEs

ICSA-19-295-01_Schneider Electric ProClima

Published Oct 22, 2019 · Updated Oct 22, 2019

Vendor: Schneider Electric Product: ProClima

Summary

Haojun Hou reported a vulnerability to CISA. Kushal Arvind Shah of Fortinet,Yongjun Liu of NSFOCUS security team, and Telus reported vulnerabilities to Schneider Electric.

Vulnerabilities 3

Unscored —

CVE-2019-6823

A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an un…

ProClima ProClima all versions prior to version 8.0.0

Jul 15, 2019
Unscored —

CVE-2019-6824

A CWE-119: Buffer Errors vulnerability exists in ProClima (all versions prior to version 8.0.0) which allows an unauthe…

ProClima ProClima all versions prior to version 8.0.0

Jul 15, 2019
Unscored —

CVE-2019-6825

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) whic…

ProClima ProClima all versions prior to version 8.0.0

Jul 15, 2019

Revision history

2019-10-22 #1
ICSA-19-295-01 Schneider Electric ProClima

References

ICS Advisory ICSA-19-295-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-295-01