PT-2019-3828 · Schneider Electric · Somachine+2

Publicado 2019-09-17 · Atualizado 2022-02-03 · CVE-2019-6826

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SoMachine versions prior to 2.4.1 SoMachine HVAC versions prior to 2.4.1 SoMove (affected versions not specified)

Description The issue is related to the use of an untrusted search path, which could allow an attacker to load a malicious DLL library and execute arbitrary code on the system running the affected software. This could lead to arbitrary code execution when a malicious DLL library is loaded by the product.

Recommendations For SoMachine versions prior to 2.4.1: Update to a version later than 2.4.1 to resolve the issue. For SoMachine HVAC versions prior to 2.4.1: Update to a version later than 2.4.1 to resolve the issue. For SoMove: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

BDU:2019-04187

CVE-2019-6826

Produtos afetados

Somachine

Somachine Hvac

Somove

Referências · 6

• https://schneider-electric.com/en/download/document/SEVD-2019-225-04 · Aviso do Fabricante
• https://t.me/cvenotify/26219 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-6826 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-6826 · Aviso do Fabricante
• https://t.me/cvenotify/19914 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2019-04187 · Nota de Segurança