Schneider-electric Proclima — known CVE vulnerabilities

Every CVE whose affected-product data names Schneider-electric Proclima, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2014-8511 — CVSS 10.0 (critical): Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary…
• CVE-2019-6823 — CVSS 9.8 (critical): A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated…
• CVE-2019-6824 — CVSS 9.8 (critical): A CWE-119: Buffer Errors vulnerability exists in ProClima (all versions prior to version 8.0.0) which allows an unauthenticated, remote…
• CVE-2019-6825 — CVSS 7.8 (high): A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a…
• CVE-2015-7918 — CVSS 6.8 (medium): Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers…
• CVE-2015-8561 — CVSS 6.8 (medium): The F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allows remote attackers to execute arbitrary code…