Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxureª Operator Terminal Expert.
CVSS Information
N/A
Vulnerability Type
特权管理不恰当
Vulnerability Title
Schneider Electric EcoStruxure Operator Terminal Expert 权限许可和访问控制问题漏洞
Vulnerability Description
Schneider Electric EcoStruxure Operator Terminal Expert是法国施耐德电气（Schneider Electric）公司的一款触控屏配置软件。该软件支主要用于创建和编辑触控应用程序。 EcoStruxure Operator Terminal Expert 存在权限许可和访问控制问题漏洞，该漏洞源于不当权限管理，在与EcoStruxure Operator Terminal Expert运行时软件安装的驱动程序直接交互时，会导致工作站权限升级。
CVSS Information
N/A
Vulnerability Type
N/A