CVE-2024-8306 — Schneider Electric / Vijeo Designer

CVE-2024-8306

Schneider Electric / Vijeo Designer PUBLISHED

Description (CNA)

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / Vijeo Designer	affected Prior to V6.3 SP1
Schneider Electric / Vijeo Designer embedded in EcoStruxure™ Machine Expert	affected All Versions

CWE

CWE-269

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-254-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-254-01.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.