Out-of-bounds Write Vulnerability in EcoStruxure Machine Expert and SoMachine HVAC by Schneider Electric
CVE-2022-2988

4.3MEDIUM

Key Information:

Vendor

Schneider Electric
Status
Somachine Hvac
Ecostruxure Machine Expert – Hvac
Vendor
CVE Published:
30 January 2023

What is CVE-2022-2988?

An out-of-bounds write vulnerability can be exploited when users access a malicious webpage through the commissioning software. This may lead to the leakage of sensitive information, posing a significant risk to the security of the system. Affected versions include SoMachine HVAC prior to V2.1.0 and EcoStruxure Machine Expert – HVAC prior to V1.4.0. It is crucial for users to update their software to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

EcoStruxure Machine Expert – HVAC All

SoMachine HVAC All

References

https://download.schneider-electric.com/files?p_Doc_Ref=S...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.