{
    "id": "CVE-2019-6823",
    "published": "2019-07-15 21:15:10",
    "last_modified": "2026-06-17 02:39:44",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-94",
    "description": "A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0.",
    "epss_score": "0.04953",
    "epss_percentile": "0.91944",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-07 18:17:21",
    "priority": {
        "rank": 3,
        "label": "In your normal cycle",
        "why": "Critical by CVSS (9.8), but no sign of active exploitation."
    },
    "products": [
        {
            "vendor": "schneider-electric",
            "product": "proclima"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/",
        "https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/"
    ]
}