Detections
Analytics
Schneider Electric ProClima < 6.1.7 Multiple Vulnerabilities
high Nessus Network Monitor Plugin ID 9973
Synopsis
The remote host is running an outdated version of Schneider Electric's ProClima application.Description
The version of Schneider Electric's ProClima application is prior to 6.1.7 and is affected by multiple vulnerabilities :- Multiple unspecified remote buffer-overflow vulnerabilities exist because the application fails to properly validate user-supplied input. An attacker may be able to exploit these issues to execute arbitrary code in the context of the system using unspecified ActiveX controls, and even failed exploit attempts can result in denial-of-service conditions.
Solution
Upgrade to ProClima version 6.1.7 or later.See Also
Plugin Details
Severity: High
ID: 9973
Family: SCADA
Published: 2/24/2017
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 6.8
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.1
Temporal Score: 7.1
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:schneider-electric:proclima
Patch Publication Date: 12/10/2014
Vulnerability Publication Date: 12/16/2014
Reference Information
CVE: CVE-2014-8511, CVE-2014-8512, CVE-2014-8513, CVE-2014-8514, CVE-2014-9188