Vulnerabilities > Schneider Electric > Proclima > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-07-15 CVE-2019-6823 Code Injection vulnerability in Schneider-Electric Proclima 6.0.1/6.1
A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0.
network
low complexity
schneider-electric CWE-94
critical
9.8
2019-07-15 CVE-2019-6824 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Schneider-Electric Proclima 6.0.1/6.1
A CWE-119: Buffer Errors vulnerability exists in ProClima (all versions prior to version 8.0.0) which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0.
network
low complexity
schneider-electric CWE-119
critical
9.8