Description
An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting) flag.
Advisories 1
- ICSA-16-196-03 Schneider Electric SoMachine HVAC Unsafe ActiveX Control Vulnerability CISA ICS & IT advisories · Jun 9, 2025