Description (CNA)
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schneider Electric / Saitel DR RTU | affected Versions 11.06.29 and prior |
| Schneider Electric / Saitel DP RTU | affected Versions 11.06.34 and prior |
CWE
CWE-269
References
ADP enrichment
No English description supplied.
No references supplied.