Schneider-electric

Easergy Studio

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2024-9002

  • EPSS 0.03%
  • Published 11.10.2024 14:15:06
  • Last modified 15.10.2024 12:58:51

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity, and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampe...

7.8

CVE-2024-2747

  • EPSS 0.11%
  • Published 12.06.2024 18:15:11
  • Last modified 21.11.2024 09:10:25

CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted file name on the system and reboots the machine.

7.8

CVE-2023-7032

  • EPSS 0.18%
  • Published 09.01.2024 20:15:42
  • Last modified 21.11.2024 08:45:05

A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker logged in with a user level account to gain higher privileges by providing a harmful serialized object.