Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-2988 EUVD-2022-35208GHSA-q443-qgfv-3fpg

A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from…

Published Jan 30, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: Ecostruxure™ Machine Expert HVAC Product: SoMachine HVAC Category: ICS / OT

Description

A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC (Versions prior to V2.1.0), EcoStruxure Machine Expert – HVAC (Versions prior to V1.4.0)

Affected products

VendorProductAffectedFixed
Schneider Electric SoMachine HVAC All – < V2.1.0 V2.1.0
Schneider Electric EcoStruxure Machine Expert – HVAC All – < V1.4.0 V1.4.0

Advisories 1

References