Out-of-bounds Write Vulnerability in EcoStruxure Machine Expert and SoMachine HVAC by Schneider Electric

CVE-2022-2988

What is CVE-2022-2988?

An out-of-bounds write vulnerability can be exploited when users access a malicious webpage through the commissioning software. This may lead to the leakage of sensitive information, posing a significant risk to the security of the system. Affected versions include SoMachine HVAC prior to V2.1.0 and EcoStruxure Machine Expert – HVAC prior to V1.4.0. It is crucial for users to update their software to mitigate these risks.

References