CVE-2017-7966: Schneider Electric Somachine

High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days.

A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to the improper loading of a DLL.

Affected products

• Schneider Electric Somachine: version 2.1.0 only

Published 2017-06-07. Last modified 2026-06-17.