Lucene search
SchneiderCVELIST:CVE-2024-5558HistoryJun 12, 2024 - 4:26 p.m.
CVE-2024-5558
2024-06-1216:26:26
CWE-367
schneider
www.cve.org
6
toctou race condition
privilege escalation
limited admin account
CVSS3
6.4
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
16.2%
CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could
cause escalation of privileges when an attacker abuses a limited admin account.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "SpaceLogic AS-P",
"vendor": "Schneider Electric",
"versions": [
{
"status": "affected",
"version": "V5.0.3 and prior"
}
]
},
{
"defaultStatus": "unaffected",
"product": "SpaceLogic AS-B",
"vendor": "Schneider Electric",
"versions": [
{
"status": "affected",
"version": "V5.0.3 and prior"
}
]
}
]Related
cve
cve
CVE-2024-5558
2024-06-12 17:15:52
vulnrichment
vulnrichment
CVE-2024-5558
2024-06-12 16:26:26
nvd
nvd
CVE-2024-5558
2024-06-12 17:15:52
CVSS3
6.4
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
16.2%
Related for CVELIST:CVE-2024-5558