Vulnerability Details CVE-2019-6823
A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.155
EPSS Ranking 94.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
Products affected by CVE-2019-6823
-
cpe:2.3:a:schneider-electric:proclima:6.0.1
-
cpe:2.3:a:schneider-electric:proclima:6.1