Schneider Electric SoMachine HVAC
ATTENTION: Low skill level to exploit
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-7966US | high8.8 | — | ||
A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. T… | ||||
| CVE-2017-7965US | high7.3 | — | ||
A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller. | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationSoMachine HVAC
Schneider Electric's security notice SEVD-2017-125-01 is available at the following location:
http://www.schneider-electric.com/en/download/document/SEVD-2017-125-01/ - MitigationSoMachine HVAC
Schneider Electric's security notice SEVD-2017-125-01 is available at the following location:
http://www.schneider-electric.com/en/download/document/SEVD-2017-125-01/ - FixedSoMachine HVAC
Schneider Electric recommends that users of SoMachine HVAC Programming Software update to SoMachine HVAC v2.2. Users of SoMachine HVAC can access the update at the following support web site:
http://www.schneider-electric.com/en/download/document/SoMachine%20HVAC%20-%20Programming%20Software%20for%20Modicon%20M171-M172%20Logic%20Controllers/ - FixedSoMachine HVAC
Schneider Electric recommends that users of SoMachine HVAC Programming Software update to SoMachine HVAC v2.2. Users of SoMachine HVAC can access the update at the following support web site:
http://www.schneider-electric.com/en/download/document/SoMachine%20HVAC%20-%20Programming%20Software%20for%20Modicon%20M171-M172%20Logic%20Controllers/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan