CVE-2019-6825

published 2019-07-15

CVE-2019-6825: A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version 8.0.0.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
proclima	proclima_all_versions_prior_to_version_8.0.0	—	—
schneider-electric	proclima	< 8.0.0	8.0.0

CWE-427