Description
A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a DLL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric SE | SoMachine HVAC Programming Software | v2.1.0 for Modicon M171/M172 Controllers | — |
Advisories 1
- ICSA-17-136-02 Schneider Electric SoMachine HVAC CISA ICS & IT advisories · May 16, 2017