Beware of the license manager: how a Schneider Electric software vulnerability puts industrial facilities at risk

A vulnerability (CVE-2024-2658) has been identified in Schneider Electric’s Floating License Manager (FLM), specifically the FlexNet Publisher component, due to an uncontrolled search path element. This allows a local, non-administrator user to force the lmadmin.exe process to load a third-party DLL, potentially leadin…