Schneider Electric Floating License Manager Vulnerability

Vulnerabilities 1

• Medium 5.9
  CVE-2014-0759

  Schneider Electric Floating License Manager Unquoted Search Path or Element

  Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space cha…

  Schneider Electric Floating License Manager ICS / OT
  Feb 28, 2014

Revision history

1. 2025-06-09 #2

   Advisory converted into a CSAF

2. 2014-11-30 #1

   Initial Publication

References

• ICS Advisory ICSA-14-058-01 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-14-058-01
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014