VYPR
← All advisories
High severity7.8NVD Advisory· Published Sep 17, 2019· Updated Jun 17, 2026

CVE-2019-6826

CVE-2019-6826

Description

A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier versions, which could cause arbitrary code execution on the system running SoMachine HVAC when a malicious DLL library is loaded by the product.

Affected products

3
  • Schneider Electric/Somachine Hvac3 versions
    cpe:2.3:a:schneider-electric:somachine_hvac:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:schneider-electric:somachine_hvac:*:*:*:*:*:*:*:*range: <=2.4.1
    • (no CPE)range: <=2.4.1
    • (no CPE)range: v2.4.1 and earlier versions

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.