VulnerabilityModified

CVE-2015-7918

MEDIUM 6.8EPSS 5.73%

Does this matter?

Lower severity and a low EPSS score (5.73%). Track it; it rarely justifies an emergency change on its own.

Description

Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561.

CVSS 2.0: 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 5.73% probability · 93th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: schneider-electric/proclima
Source: ics-cert@hq.dhs.gov

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.