Schneider Electric Ecostruxure Machine Expert Hvac vulnerabilities

1 known vulnerability affecting schneider_electric/ecostruxure_machine_expert_hvac.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-2988HIGHCVSS 7.5≥ All, < V1.4.02023-01-30

CVE-2022-2988 [HIGH] CWE-787 CVE-2022-2988: A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage w A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC (Versions prior to V2.1.0), EcoStruxure Machine Expert – HVAC (Versions prior to V1.4.0)