1. Home
  2. CVE Database
  3. CVE-2019-6825
HIGH · 7.8

CVE-2019-6825

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with the same name of any resident DLLs insid...

Vulnerability Description

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version 8.0.0.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Schneider-ElectricProclima< 8.0.0

Related Weaknesses (CWE)

CWE-427

References

FAQ

What is CVE-2019-6825?

CVE-2019-6825 is a vulnerability with a CVSS score of 7.8 (HIGH). A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with the same name of any resident DLLs insid...

How severe is CVE-2019-6825?

CVE-2019-6825 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-6825?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Proclima.