Description
A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxureª Operator Terminal Expert.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) | EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) | — |
Advisories 2
- SEVD-2020-315-02 EcoStruxure™ Operator Terminal Expert (Vijeo XD), Pro-face BLUE and WinGP runtime Schneider Electric CPCERT · Jan 11, 2021
- ICSA-20-336-01 Schneider Electric EcoStruxure Operator Terminal Expert runtime (Vijeo XD) CISA ICS & IT advisories · Dec 1, 2020