CVE-2024-2658
highPriorität · verfolgen · 0EPSS 0.008 · 57. PerzentilDEEURUUSEPSS · bewertet 2026-10-27
A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configuration file to load from a non-existent directory. An unauthorized, locally authenticated user with low privileges can potentially create the directory and load a specially crafted openssl.conf file leading to the execution of a malicious DLL (Dynamic-Link Library) with elevated privileges.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenEcoStruxure™ Architecture Buildercisa_csaf_ot
Version V7.0.18 of EcoStruxure™ Architecture Builder includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/195445393-ecostruxure-architecture-builder/ - software-and-firmware
https://www.se.com/ww/en/product-range/195445393-ecostruxure-architecture-builder/#software-and-firmware - BehobenEcoStruxure™ Control Expertcisa_csaf_ot
Version 16.2 of EcoStruxure™ Control Expert includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/548-ecostruxure-control-expert-unity-pro/ Reboot the computer after installation is completed.
https://www.se.com/ww/en/product-range/548-ecostruxure-control-expert-unity-pro/ - BehobenEcoStruxure™ Control Expert Asset Linkcisa_csaf_ot
Version V4.0SP1 of EcoStruxure™ Control Expert Asset Link includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/ECALV40SP1/
https://www.se.com/ww/en/product-range/548-ecostruxure-control-expert-unity-pro/ - BehobenEcoStruxure™ Machine Expertcisa_csaf_ot
Version v2.5.0.1 of EcoStruxure™ Machine Expert includes a fix for this vulnerability and can be installed through Schneider Electric Software Installer available here: https://www.se.com/ww/en/download/document/ESEMACS10_INSTALLER/
https://www.se.com/ww/en/download/document/ESEMACS10_INSTALLER/ - BehobenEcoStruxure™ Machine Expert Twincisa_csaf_ot
Version v2.3 of EcoStruxure™ Machine Expert Twin includes a fix for this vulnerability and can be installed through Schneider Electric Software Installer available here: https://www.se.com/ww/en/download/document/ESEMACS10_INSTALLER/
https://www.se.com/ww/en/download/document/ESEMACS10_INSTALLER/ - BehobenEcoStruxure™ OPC UA Server Expertcisa_csaf_ot
Version SV2.01SP3 of EcoStruxure™ OPC UA Server Expert includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/66388-ecostruxure-opc-ua-server-expert/#software-and-firmware
https://www.se.com/ww/en/product-range/66388-ecostruxure-opc-ua-server-expert/#software-and-firmware - BehobenEcoStruxure™ Operator Terminal Expertcisa_csaf_ot
Version 4.0 of EcoStruxure™ Operator Terminal Expert includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/62621-ecostruxure-operator-terminal-expert/#software-and-firmware
https://www.se.com/ww/en/product-range/62621-ecostruxure-operator-terminal-expert/#software-and-firmware - BehobenEcoStruxure™ Process Expertcisa_csaf_ot
Version 2023 (v4.8.0.5715) of EcoStruxure™ Process Expert includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=65406
https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=65406 - BehobenPro-face BLUEcisa_csaf_ot
Version 4.0 of Pro-face BLUE includes a fix for this vulnerability and is available for download here: https://www.proface.com/en/hmi_design_studio/blue/page/installer
https://www.proface.com/en/hmi_design_studio/blue/page/installer - BehobenVijeo Designercisa_csaf_ot
Version V6.3SP1 HF1 of Vijeo Designer includes a fix for this vulnerability. Please contact your Schneider Electric Customer Support https://www.se.com/ww/en/work/support/country-selector/contact-us.jsp to get Vijeo Designer version V6.3SP1 HF1 software.
- BehobenZelio Soft 2cisa_csaf_ot
Version 5.4.3 of Zelio Soft 2 includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/542-zelio-soft/#software-and-firmware
https://www.se.com/ww/en/product-range/542-zelio-soft/#software-and-firmware - MitigationEcoStruxure™ Architecture Buildercisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here.
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true - MitigationEcoStruxure™ Control Expertcisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here.
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true - MitigationEcoStruxure™ Control Expert Asset Linkcisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here.
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true - MitigationEcoStruxure™ Machine Expertcisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here.
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true - MitigationEcoStruxure™ Machine Expert Safetycisa_csaf_ot
Schneider Electric is establishing a remediation plan for all future versions of the following that will include a fix for this vulnerability: • EcoStruxure™ Process Expert • EcoStruxure™ OPC UA Server Expert • EcoStruxure™ Machine SCADA Expert - Asset Link • EcoStruxure™ Operator Terminal Expert • EcoStruxure™ Machine Expert including EcoStruxure™ Machine Expert Safety • EcoStruxure™ Machine Expert Twin • Zelio Soft 2 We will update this document when the remediation is available. Until then, customers should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true .
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true - MitigationEcoStruxure™ Machine Expert Twincisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here.
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true - MitigationEcoStruxure™ Machine SCADA Expert Asset Linkcisa_csaf_ot
Schneider Electric is establishing a remediation plan for all future versions of the following that will include a fix for this vulnerability: • EcoStruxure™ Process Expert • EcoStruxure™ OPC UA Server Expert • EcoStruxure™ Machine SCADA Expert - Asset Link • EcoStruxure™ Operator Terminal Expert • EcoStruxure™ Machine Expert including EcoStruxure™ Machine Expert Safety • EcoStruxure™ Machine Expert Twin • Zelio Soft 2 We will update this document when the remediation is available. Until then, customers should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true .
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true - MitigationEcoStruxure™ OPC UA Server Expertcisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here.
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true - MitigationEcoStruxure™ Operator Terminal Expertcisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here.
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true - MitigationEcoStruxure™ Process Expertcisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here.
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true - MitigationEcoStruxure™ Process Expert for AVEVA System Platformcisa_csaf_ot
Schneider Electric is establishing a remediation plan for all future versions of the following that will include a fix for this vulnerability: • EcoStruxure™ Process Expert • EcoStruxure™ OPC UA Server Expert • EcoStruxure™ Machine SCADA Expert - Asset Link • EcoStruxure™ Operator Terminal Expert • EcoStruxure™ Machine Expert including EcoStruxure™ Machine Expert Safety • EcoStruxure™ Machine Expert Twin • Zelio Soft 2 We will update this document when the remediation is available. Until then, customers should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true .
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true - MitigationPro-face BLUEcisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here.
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true - MitigationVijeo Designercisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here.
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true - MitigationZelio Soft 2cisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Limit authenticated user access to the workstation and implement existing User Account Control practices. • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices guide available for download here.
https://www.se.com/ww/en/download/document/7EN52-0390/?ssr=true
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.9–8.5
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (54)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- WID-SEC-W-2024-1499Dell NetWorker: Schwachstelle ermöglicht PrivilegieneskalationDeutsch2024-07-01csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle in Dell NetWorker ausnutzen, um seine Privilegien zu erhöhen.
- ICSA-25-037-02Schneider Electric EcoStruxure (Update D)2025-01-14icsa · cisa_csaf_otUS
Schneider Electric is aware of a vulnerability disclosed on Revenera FlexNet Publisher component. Many vendors, including Schneider Electric, embed Revenera FlexNet Publisher in their offers. Failure to apply the remediation/mitigations provided below may risk a local privilege escalation, which could lead to the execution of a malicious DLL with elevated privilege.
auch bekannt als (6)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (6)
Externe Belege — Patches, Meldungen, Analysen.
- https://community.flexera.com/s/article/cve-2024-2658-flexnet-publisher-potential-local-privilege-escalation-issuecnnvd
- https://www.zerodayinitiative.com/advisories/ZDI-24-359/cnnvd
- https://community.flexera.com/s/article/cve-2024-2658-flexnet-publisher-potential-local-privilege-escalation-issueenisa_euvd
- https://www.zerodayinitiative.com/advisories/ZDI-24-359/enisa_euvd
- https://community.flexera.com/s/article/cve-2024-2658-flexnet-publisher-potential-local-privilege-escalation-issuenvd
- https://www.zerodayinitiative.com/advisories/ZDI-24-359/nvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan