4.3
Medium
CVE-2022-2988 A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a…
Description
A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC (Versions prior to V2.1.0), EcoStruxure Machine Expert – HVAC (Versions prior to V1.4.0)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SoMachine HVAC 2.1 | earliest → < 2.1.0 | 2.1.0 |
| EcoStruxure Machine Expert – HVAC 1.4 | earliest → < 1.4.0 | 1.4.0 |