CVE-2014-9188

CVE-2014-9188: Schneider Electric ProClima Command Injection

Vendor Schneider Electric

Product ProClima

Weakness CWE-77

Published December 27, 2014

Last update July 24, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-8514. NOTE: this may be clarified later based on details provided by researchers.

Key dates

02Disclosure timeline

December 27, 2014 CVE published

July 24, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2014-9188 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/77.html

Related vulnerabilities

04Related CVE

CVE-2021-1547 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities CVE-2026-5833 awwaiid mcp-server-taskwarrior index.ts server.setRequestHandler command injection CVE-2023-41029 Juplink RX4-1500 Command Injection Vulnerability CVE-2023-7227 Command Injection vulnerability in SystemK NVR 504/508/516 CVE-2024-48015