Description
Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Floating License Manager | V1.0.0 – ≤ V1.4.0 | — |
Advisories 2
- ICSA-14-058-01 Schneider Electric Floating License Manager Vulnerability CISA ICS & IT advisories · Jun 9, 2025
- WID-SEC-2024-2191 HCL BigFix: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Sep 22, 2024