Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2014-8512: Schneider Electric ProClima can be hijacked via ActiveX overflow
CVE-2014-8512 · published 11 years ago
Summary
The ProClima software version before 6.1.7 contains a flaw in its Atx45.ocx component that can let an attacker run their own code on a user's computer. This could give the attacker control over the system without the user’s knowledge. Update to the latest version of ProClima to close the gap.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| schneider_electric | proclima |
<= 6.0.1 cpe:2.3:a:schneider_electric:proclima:*:*:*:*:*:*:*:* |
Original advisory text
Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability t...
Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8511. NOTE: this may be clarified later based on details provided by researchers.
References
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-344-01 Patch Vendor Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-14-350-01 Patch Third Party Advisory US Government Resource
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
7.5
High
Type
CWE-119Buffer Overflow
Timeline
Published27 Dec 2014
Updated23 Oct 2026
First seen29 Sep 2026
Sources
CVE-2014-8512 · NVD
Track software like this
Free during beta