CVE-2019-6823 Vulnerability Details

  /     /     /  

CVE-2019-6823 Metadata Quick Info

CVE Published: 15/07/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: schneider | Vendor: ProClima | Product: ProClima all versions prior to version 8.0.0
Status : PUBLISHED

---

CVE-2019-6823 Description

A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-94
CWE Name: CWE-94: Code Injection
Source: ProClima

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).