Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Schneider Electric Clear all filters
TI-2014-07456 CVE-2014-9188 · GHSA-9xw9-4ffg-hrqp

Schneider Electric ProClima Command Injection

Priority MEDIUM 52

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and…

CVSS 2.0CRITICAL 10.0 Network No auth Interaction — EPSS 0.06287 Published 2014-12-27 No fix listed CWE-77
TI-2014-06990 CVE-2014-8514 · GHSA-9h8r-w7wj-gx59

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima…

Priority MEDIUM 40

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04003 Published 2014-12-27 No fix listed CWE-119
TI-2014-06989 CVE-2014-8513 · GHSA-67jc-m8g3-m5h9

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima…

Priority LOW 38

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8514 and…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02948 Published 2014-12-27 No fix listed CWE-119
TI-2013-00553 CVE-2013-0662 · GHSA-8gr4-665r-f443

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus…

Priority MEDIUM 60

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application He…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.22217 Published 2014-03-28 No fix listed CWE-787