vulnerability
Beware of the license manager: how a Schneider Electric software vulnerability puts industrial facilities at risk
High
Summary
A vulnerability (CVE-2024-2658) has been identified in Schneider Electric’s Floating License Manager (FLM), specifically the FlexNet Publisher component, due to an uncontrolled search path element. This allows a local, non-administrator user to force the lmadmin.exe process to load a third-party DLL, potentially leading to privilege escalation and full system control. This poses a significant risk to industrial facilities reliant on Schneider Electric’s automation software.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data