VULNERABILITY INTELLIGENCE
CVE-2019-6823
CVSS score9.8 CRITICAL
EPSS probability4.95%
CISA KEVNot currently listed
Published2019-07-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')
Primary references
- cybersecurity@se.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory