Description
A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator (Software Version prior to V1.0.8.1), which could cause privilege escalation when injecting a malicious DLL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | MSX Configurator (Software Version prior to V1.0.8.1) | MSX Configurator (Software Version prior to V1.0.8.1) | — |
Advisories 1
- SEVD-2020-014-01 MSX Configurator Schneider Electric CPCERT · Jan 14, 2020