Overview
- Description
- CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries.
- Source
- cybersecurity@se.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
- cybersecurity@se.com
- CWE-269
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:schneider-electric:vijeo_designer:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4501EC7-939C-4E71-A5D3-3F1112D39190",
"versionEndExcluding": "6.3"
},
{
"criteria": "cpe:2.3:a:schneider-electric:vijeo_designer:6.3:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "204A592B-1B28-43FC-878F-559BDF5A7944"
},
{
"criteria": "cpe:2.3:a:schneider-electric:vijeo_designer_embedded_in_ecostruxure_machine_expert:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99EBBD6F-0C97-493A-B708-60DD27733247"
}
],
"operator": "OR"
}
]
}
]