Skip to content
OpenAdvisories
Medium · 6.3 CVE-2022-34755 EUVD-2022-37703GHSA-3r22-jvx3-7mjc

A CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker with a local privileged account to place a s…

Published Apr 18, 2023 · Updated Mar 3, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: Easergy Builder Installer Category: ICS / OT

Description

A CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker
with a local privileged account to place a specially crafted file on the target machine, which may
give the attacker the ability to execute arbitrary code during the installation process initiated by a
valid user. Affected Products: Easergy Builder Installer (1.7.23 and prior)

Affected products

VendorProductAffectedFixed
Schneider Electric Easergy Builder Installer 1.7.23 and prior —

Advisories 1

References