CVE-2024-8306

Published: Sep 11, 2024Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries.

Affected (3)

Products: Schneider Electric: Vijeo Designer, Vijeo Designer Embedded In Ecostruxure Machine Expert

Schneider Electric

2 products

Vijeo Designer

Vijeo Designer Embedded In Ecostruxure Machine Expert

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Schneider Electric Vijeo Designer	Before 6.3
Schneider Electric Vijeo Designer	Version 6.3
Schneider Electric Vijeo Designer Embedded In Ecostruxure Machine Expert	All versions

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-254-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-254-01.pdf

Source: cybersecurity@se.com

Vendor Advisory

Timeline

No history available yet.