Unauthorized Access to Workstation via Tampering with Binaries

CVE-2024-8306
7.8HIGH

Key Information

Vendor
Schneider Electric
Status
Vijeo Designer
Vijeo Designer Embedded In Ecostruxure™ Machine Expert
Vendor
CVE Published:
11 September 2024

Summary

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries.

Affected Version(s)

Vijeo Designer = Prior to V6.3 SP1

Vijeo Designer embedded in EcoStruxure™ Machine Expert = All Versions

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database
.