CVE-2014-0759CWE-428
Schneider Electric Floating License Manager Unquoted Search Path or Element
Medium · published February 28, 2014
What it is
Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.
The record
Technical detail
- CVSS v2.0
- 6.9 · MEDIUM
- Vector
- AV:L/AC:M/Au:N/C:C/I:C/A:C
- CVSS v4.0
- Not supplied
- EPSS
- 0.00446 · 37.5th percentile
- Weakness
- CWE-428 · Unquoted Search Path or Element
- Published
- 2014-02-28T02:00Z
EPSS history
Timeline