Lucene search
SchneiderCVE-2024-5558HistoryJun 12, 2024 - 5:15 p.m.
CVE-2024-5558
2024-06-1217:15:52
CWE-367
schneider
web.nvd.nist.gov
28
cwe-367
race condition
privilege escalation
limited admin account
CVSS3
6.4
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
High
EPSS
0
Percentile
16.2%
CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could
cause escalation of privileges when an attacker abuses a limited admin account.
Affected configurations
Node
schneider-electricspacelogic_as-b_firmwareRange<6.0.1
schneider-electricspacelogic_as-bMatch-
Node
schneider-electricspacelogic_as-p_firmwareRange<6.0.1
schneider-electricspacelogic_as-pMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| schneider-electric | spacelogic_as-b_firmware | * | cpe:2.3:o:schneider-electric:spacelogic_as-b_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | spacelogic_as-b | - | cpe:2.3:h:schneider-electric:spacelogic_as-b:-:*:*:*:*:*:*:* |
| schneider-electric | spacelogic_as-p_firmware | * | cpe:2.3:o:schneider-electric:spacelogic_as-p_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | spacelogic_as-p | - | cpe:2.3:h:schneider-electric:spacelogic_as-p:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "SpaceLogic AS-P",
"vendor": "Schneider Electric",
"versions": [
{
"status": "affected",
"version": "V5.0.3 and prior"
}
]
},
{
"defaultStatus": "unaffected",
"product": "SpaceLogic AS-B",
"vendor": "Schneider Electric",
"versions": [
{
"status": "affected",
"version": "V5.0.3 and prior"
}
]
}
]Related
cvelist
cvelist
CVE-2024-5558
2024-06-12 16:26:26
vulnrichment
vulnrichment
CVE-2024-5558
2024-06-12 16:26:26
nvd
nvd
CVE-2024-5558
2024-06-12 17:15:52
CVSS3
6.4
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
High
EPSS
0
Percentile
16.2%
Related for CVE-2024-5558