Skip to content
OpenAdvisories
High · 7.8 CVE-2024-2747 EUVD-2024-27692GHSA-qhx6-9fwx-wcfm

CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user r…

Published Jun 12, 2024 · Updated Aug 19, 2024 · Assigned by schneider

Description

CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could
cause privilege escalation when a valid user replaces a trusted file name on the system and
reboots the machine.

Affected products

VendorProductAffectedFixed
Schneider Electric Easergy Studio v9.3.3 and prior —

Advisories 1

References