Skip to content
OpenAdvisories
Medium · 6.4 CVE-2024-5558 EUVD-2024-46757GHSA-j253-hr3w-xhj7

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could cause escalation of privileges when an attacker …

Published Jun 12, 2024 · Updated Aug 1, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: SpaceLogic AS-B Product: SpaceLogic AS-P Category: ICS / OT

Description

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could
cause escalation of privileges when an attacker abuses a limited admin account.

Affected products

VendorProductAffectedFixed
Schneider Electric SpaceLogic AS-P V5.0.3 and prior —
Schneider Electric SpaceLogic AS-B V5.0.3 and prior —

Advisories 1

References