Lucene search

K
cveIcscertCVE-2014-0759
HistoryFeb 28, 2014 - 6:18 a.m.

CVE-2014-0759

2014-02-2806:18:54
icscert
web.nvd.nist.gov
77
cve-2014-0759
unquoted path
vulnerability
schneider electric
floating license manager
windows security
privilege escalation

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

46.7%

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.

Affected configurations

Nvd
Node
schneider-electricfloating_license_managerMatch1.0.0
OR
schneider-electricfloating_license_managerMatch1.4.0
VendorProductVersionCPE
schneider-electricfloating_license_manager1.0.0cpe:2.3:a:schneider-electric:floating_license_manager:1.0.0:*:*:*:*:*:*:*
schneider-electricfloating_license_manager1.4.0cpe:2.3:a:schneider-electric:floating_license_manager:1.4.0:*:*:*:*:*:*:*

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

46.7%