What’s Vulnerable › Vulnerabilities

CVE-2017-9961

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-09-26 · updated 2026-06-17

Description

A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL and execute arbitrary code in the context of the process.

Affected products

• Schneider Electric SE ProFace GP-Pro EX: 4.07.000

References

• http://www.schneider-electric.com/en/download/document/SEVD-2017-195-01/
• http://www.securityfocus.com/bid/100114
• http://www.schneider-electric.com/en/download/document/SEVD-2017-195-01/
• http://www.securityfocus.com/bid/100114

Get alerted when CVE-2017-9961 or the next vulnerability affects your stack