Lucene search
HistoryJun 12, 2024 - 6:15 p.m.
CVE-2024-2747
cve-2024-2747
cwe-428
easergy studio
unquoted search path
privilege escalation
trusted file name
system reboot
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
16.5%
CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could
cause privilege escalation when a valid user replaces a trusted file name on the system and
reboots the machine.
Affected configurations
Node
schneider-electriceasergy_studioRange≤9.3.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| schneider-electric | easergy_studio | * | cpe:2.3:a:schneider-electric:easergy_studio:*:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
CVE-2024-2747
2024-06-12 17:12:20
cvelist
cvelist
CVE-2024-2747
2024-06-12 17:12:20
cve
cve
CVE-2024-2747
2024-06-12 18:15:11
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
16.5%
Related for NVD:CVE-2024-2747