CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2024-2747

CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted file name on the system and reboots the machine.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 11.0%

CVSS Severity

CVSS v3 Score 7.8

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-100-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-100-01.pdf
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-100-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-100-01.pdf

Products affected by CVE-2024-2747

Schneider-Electric » Easergy Studio » Version: N/A

cpe:2.3:a:schneider-electric:easergy_studio:-
Schneider-Electric » Easergy Studio » Version: 9.3.3

cpe:2.3:a:schneider-electric:easergy_studio:9.3.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-2747

Products

Pricing

Contact Us