CVE-2017-7965

HIGH

Schneider Electric SoMachine HVAC v2.1.0 - Buffer Overflow in AlTracePrint.exe

Title source: llm

Description

A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://www.schneider-electric.com/en/download/document/SEVD-2017-125-01/

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/98449

Scores

CVSS v3 7.3

EPSS 0.0008

EPSS Percentile 24.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (2)

Schneider Electric SE/SoMachine HVAC Programming Software v2.1.0 for Modicon M171/M172 Controllers

schneider-electric/somachine_hvac 2.1.0

Published Jun 07, 2017

Tracked Since Feb 18, 2026