VYPR
← All advisories
High severity7.8NVD Advisory· Published Sep 11, 2024· Updated Jun 17, 2026

CVE-2024-8306

CVE-2024-8306

Description

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries.

Affected products

5
  • Schneider Electric/Vijeo Designer3 versions
    cpe:2.3:a:schneider-electric:vijeo_designer:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:schneider-electric:vijeo_designer:*:*:*:*:*:*:*:*range: <6.3
    • cpe:2.3:a:schneider-electric:vijeo_designer:6.3:-:*:*:*:*:*:*
    • (no CPE)range: Prior to V6.3 SP1
  • Schneider Electric/Vijeo Designer Embedded In Ecostruxure Machine Expert
    cpe:2.3:a:schneider-electric:vijeo_designer_embedded_in_ecostruxure_machine_expert:*:*:*:*:*:*:*:*
  • Schneider Electric/Vijeo Designer embedded in EcoStruxure™ Machine Expertv5
    Range: All Versions

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.