Schneider Electric SoMachine HVAC
ATTENTION: Low skill level to exploit
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-7966US | high8.8 | — | ||
A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. T… | ||||
| CVE-2017-7965US | high7.3 | — | ||
A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationSoMachine HVAC
Schneider Electric's security notice SEVD-2017-125-01 is available at the following location:
http://www.schneider-electric.com/en/download/document/SEVD-2017-125-01/ - MitigationSoMachine HVAC
Schneider Electric's security notice SEVD-2017-125-01 is available at the following location:
http://www.schneider-electric.com/en/download/document/SEVD-2017-125-01/ - BehobenSoMachine HVAC
Schneider Electric recommends that users of SoMachine HVAC Programming Software update to SoMachine HVAC v2.2. Users of SoMachine HVAC can access the update at the following support web site:
http://www.schneider-electric.com/en/download/document/SoMachine%20HVAC%20-%20Programming%20Software%20for%20Modicon%20M171-M172%20Logic%20Controllers/ - BehobenSoMachine HVAC
Schneider Electric recommends that users of SoMachine HVAC Programming Software update to SoMachine HVAC v2.2. Users of SoMachine HVAC can access the update at the following support web site:
http://www.schneider-electric.com/en/download/document/SoMachine%20HVAC%20-%20Programming%20Software%20for%20Modicon%20M171-M172%20Logic%20Controllers/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan