CVE-2016-4529: Schneider Electric Somachine Hvac Firmware

High severity, CVSS 7.3. EPSS: 5% chance of exploitation in the next 30 days.

An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting) flag.

Affected products

• Schneider Electric Somachine Hvac Firmware: up to and including 2.0.2

Published 2016-07-15. Last modified 2026-06-17.