CVE-2019-6858

A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator (Software Version prior to V1.0.8.1), which could cause privilege escalation when injecting a malicious DLL.

Score

CVSS 3.1 7.8 High

Status

Modified - cybersecurity@se.com

Published

2020-01-22

Last modified

2024-08-04

Weaknesses

CWE-427

Affected products

• Msx Configurator (Schneider-electric)

References

• https://www.se.com/ww/en/download/document/SEVD-2020-014-01