CVE-2019-6825

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-07-15 · updated 2026-06-17
Weakness: CWE-427

Description

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version 8.0.0.

Affected products

ProClima all versions prior to version 8.0.0: before 8.0.0 — fixed in 8.0.0

How to fix

Upgrade to a fixed version: ProClima all versions prior to version 8.0.0 8.0.0. Check the vendor advisory for mitigations.

References

https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/
https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/

Get alerted when CVE-2019-6825 or the next vulnerability affects your stack