CVE-2014-9188
HighSummary
Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before version 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors.
Risk Assessment
Attackers may exploit this vulnerability to remotely execute malicious code, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update Schneider Electric ProClima to version 6.1.7 or later to mitigate this vulnerability.
Other vulnerabilities in MDraw30.ocx
See all- CVE-2014-8514High
Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before version 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors.
- CVE-2014-8513High
Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before version 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors.
Original NVD description (English source)
Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-8514. NOTE: this may be clarified later based on details provided by researchers.