Skip to content
OpenAdvisories
High · 7.8 CVE-2024-0865 EUVD-2024-16648GHSA-3qp4-cvq4-28r4

CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrat…

Published Jun 12, 2024 · Updated Aug 1, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure IT Gateway Category: ICS / OT

Description

CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege
escalation when logged in as a non-administrative user.

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure IT Gateway 1.20.x and prior —

Advisories 1

References