CVE-2024-2747: High severity schneider electric easergy studio vulnerability
CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted file name on the system and reboots the machine.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2747?
CVE-2024-2747 has a high severity rating due to its potential for privilege escalation.
How do I fix CVE-2024-2747?
To fix CVE-2024-2747, ensure that all file paths in the Easergy Studio installation are properly quoted and review trusted files on the system.
Who is affected by CVE-2024-2747?
Users of Schneider Electric Easergy Studio versions up to and including 9.3.3 are affected by CVE-2024-2747.
What types of systems are impacted by CVE-2024-2747?
CVE-2024-2747 impacts systems that utilize Schneider Electric Easergy Studio, specifically when misconfigured with unquoted paths.
What can attackers do with CVE-2024-2747?
Attackers can exploit CVE-2024-2747 to replace trusted file names, leading to potential privilege escalation on the affected systems.