Description
A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ProClima | ProClima all versions prior to version 8.0.0 | ProClima all versions prior to version 8.0.0 | — |
Advisories 1
- ICSA-19-295-01 ICSA-19-295-01_Schneider Electric ProClima CISA ICS & IT advisories · Oct 22, 2019