Description
A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version 8.0.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ProClima | ProClima all versions prior to version 8.0.0 | ProClima all versions prior to version 8.0.0 | — |
Advisories 1
- ICSA-19-295-01 ICSA-19-295-01_Schneider Electric ProClima CISA ICS & IT advisories · Oct 22, 2019