Summary
Schneider Electric is aware of a vulnerability in its Easergy Studio product.
The Easergy Studio product is a software solution for configuring, monitoring, and managing
control devices.
Failure to apply the provided remediation below may risk unquoted search paths, which could
result in escalation of privilege.
Vulnerabilities 1
-
High 7.8
CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation…
Revision history
-
#1
Original Release
References
-
Easergy Studio - SEVD-2024-100-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-100-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-100-01.pdf
-
Recommended Cybersecurity Best Practices
https://download.schneider-electric.com/files?p_Doc_Ref=7EN52-0390&p_enDocType=White+Paper&p_File_Name=Cybersecurity_Best+Practices_EN.pdf