Description (CNA)
A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a DLL.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schneider Electric SE / SoMachine HVAC Programming Software | affected v2.1.0 for Modicon M171/M172 Controllers |
CWE
No CWE identifiers supplied.
References
- http://www.schneider-electric.com/en/download/document/SEVD-2017-125-02/
- http://www.securityfocus.com/bid/98446
ADP enrichment
No English description supplied.