PT-2019-6019 · Proclima · Proclima

Published 2019-07-11 · Updated 2022-10-14 · CVE-2019-6823

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ProClima versions prior to 8.0.0

Description The issue is related to incorrect code generation management, allowing a remote attacker to execute arbitrary code on the targeted system. This can be exploited by an unauthenticated, remote attacker.

Recommendations For versions prior to 8.0.0, update to version 8.0.0 or later to resolve the issue.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2021-04320

CVE-2019-6823

Affected Products

Proclima

References · 6

• https://schneider-electric.com/en/download/document/SEVD-2019-162-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6823 · Security Note
• https://bdu.fstec.ru/vul/2021-04320 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6823 · Vendor Advisory
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2019-162-01-ProClima.pdf&p_Doc_Ref=SEVD-2019-162-01 · Note
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2019-162-01-ProClima.pdf&p_Doc_Ref=SEVD-2019-162-01 · Note