Schneider Electric Somachine Hvac vulnerabilities

3 CVEs affecting Schneider Electric Somachine Hvac, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-2988, published 2023-01-30.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-6826, published 2019-09-17. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier versions, which could cause arbitrary code execution on the system running SoMachine HVAC when a malicious…
• CVE-2022-2988, published 2023-01-30. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine…
• CVE-2017-7965, published 2017-06-07. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller.