{"id":"CVE-2014-0759","state":"PUBLISHED","title":"Schneider Electric Floating License Manager Unquoted Search Path or Element","description":"Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.","publishedAt":"2014-02-28T02:00:00.000Z","updatedAt":"2026-05-28T17:32:03.919Z","severity":{"score":6.9,"label":"Medium","version":"2.0","vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","source":"icscert"},"assigner":"icscert","products":["Schneider Electric Floating License Manager"],"affected":[{"vendor":"Schneider Electric","product":"Floating License Manager","defaultStatus":"unaffected","versions":[{"version":"V1.0.0","status":"affected","lessThanOrEqual":"V1.4.0","versionType":"custom"}]}],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-14-058-01","http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-015-01","http://ics-cert.us-cert.gov/advisories/ICSA-14-058-01"],"weaknesses":["CWE-428"],"ingestedAt":"2026-10-29T19:41:00.122Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2014/0xxx/CVE-2014-0759.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2014-0759","state":"PUBLISHED","datePublished":"2014-02-28T02:00:00.000Z","dateUpdated":"2026-05-28T17:32:03.919Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2014-01-02T00:00:00.000Z"},"containers":{"cna":{"title":"Schneider Electric Floating License Manager Unquoted Search Path or Element","descriptions":[{"lang":"en","value":"Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character."}],"affected":[{"vendor":"Schneider Electric","product":"Floating License Manager","defaultStatus":"unaffected","versions":[{"version":"V1.0.0","status":"affected","lessThanOrEqual":"V1.4.0","versionType":"custom"}]}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-14-058-01"},{"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-015-01","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV2_0":{"accessComplexity":"MEDIUM","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":6.9,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","version":"2.0"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-428","description":"CWE-428","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2025-09-19T18:52:00.207Z"},"datePublic":"2014-02-27T07:00:00.000Z","solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Deployment of the Schneider Electric products using the vulnerable \nfloating license manager are designed to be automatically updated via \nthe Schneider Electric Software Update system.</p>\n<p>Schneider Electric’s latest download patches and known vulnerabilities are available here:</p>\n<p><a target=\"_blank\" rel=\"nofollow\" href=\"http://www2.schneider-electric.com/sites/corporate/en/support/cybersecurity/cybersecurity.page\">http://www2.schneider-electric.com/sites/corporate/en/support/cybersecurity/cybersecurity.page</a></p>\n\n<br>"}],"value":"Deployment of the Schneider Electric products using the vulnerable \nfloating license manager are designed to be automatically updated via \nthe Schneider Electric Software Update system.\n\n\nSchneider Electric’s latest download patches and known vulnerabilities are available here:\n\n\n http://www2.schneider-electric.com/sites/corporate/en/support/cybersecurity/cybersecurity.page"}],"source":{"advisory":"ICSA-14-058-01","discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","ID":"CVE-2014-0759","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://ics-cert.us-cert.gov/advisories/ICSA-14-058-01","refsource":"MISC","url":"http://ics-cert.us-cert.gov/advisories/ICSA-14-058-01"},{"name":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-015-01","refsource":"CONFIRM","url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-015-01"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-14-058-01","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-015-01","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T09:27:19.486Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"timestamp":"2026-05-28T17:30:21.642177Z","id":"CVE-2014-0759","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-28T17:32:03.919Z"}}]}}}