Lucene search
HistoryAug 04, 2015 - 1:59 a.m.
CVE-2015-3940
cve-2015-3940
schneider electric
wonderware system platform
vulnerability
privilege escalation
nvd
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.6%
Untrusted search path vulnerability in Schneider Electric Wonderware System Platform before 2014 R2 Patch 01 allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected configurations
Node
schneider-electricwonderware_system_platform_2014Matchr2
Related
prion
prion
Design/Logic Flaw
2015-08-04 01:59:00
ics
ics
Schneider Electric Wonderware System Platform Vulnerabilities
2015-06-18 12:00:00
cvelist
cvelist
CVE-2015-3940
2015-08-04 01:00:00
nvd
nvd
CVE-2015-3940
2015-08-04 01:59:00
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.6%
Related for CVE-2015-3940