Skip to main content

Schneider Electric CVE-2014-0759

MEDIUM
Unquoted Search Path or Element (CWE-428)
2014-02-28 ics-cert@hq.dhs.gov
Schneider Electric Microsoft Information Disclosure
5.9
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.9 MEDIUM
AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Lifecycle Timeline

2
CVSS changed
May 28, 2026 - 18:22 NVD
6.9 (MEDIUM) 5.9 (MEDIUM)
CVE Published
Feb 28, 2014 - 06:18 cve.org
MEDIUM 5.9

DescriptionCVE.org

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.

AnalysisAI

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed. Rated medium severity (CVSS 5.9), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-428. Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character. Affected products include: Schneider-Electric Floating License Manager. Version information: through 1.4.0.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Schneider Electric

View all
CVE-2013-0658 CRITICAL POC
10.0 Feb 15

Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remo
CVE-2013-0657 CRITICAL POC
10.0 Jan 21

Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote
CVE-2013-0662 CRITICAL POC
9.3 Apr 01

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow
CVE-2017-6026 CRITICAL POC
9.1 Jun 30

A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware ver
CVE-2017-6019 HIGH POC
7.5 Apr 07

An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830
CVE-2017-7575 CRITICAL POC
9.8 Apr 06

Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection pass
CVE-2016-2278 HIGH POC
7.2 Mar 02

Schneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P 1.7 and earlier allows
CVE-2014-9188 CRITICAL
10.0 Dec 27

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers
CVE-2014-0754 CRITICAL
10.0 Oct 03

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec befo
CVE-2017-9629 CRITICAL
9.8 Jul 07

A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.
CVE-2016-5809 HIGH POC
8.8 Feb 13

An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series
CVE-2018-7765 HIGH POC
8.8 Jul 03

The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software ve

Same weakness CWE-428 – Unquoted Search Path or Element

View all
CVE-2022-50935 CRITICAL POC
9.8
CVE-2023-38408 CRITICAL POC
9.8
CVE-2025-71326 HIGH POC
8.5
CVE-2016-20090 HIGH POC
8.5
CVE-2016-20089 HIGH POC
8.5
CVE-2020-37252 HIGH POC
8.5
CVE-2023-54353 HIGH POC
8.5
CVE-2020-37254 HIGH POC
8.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2014-0759 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy