Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2025-8453

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Saitel DR RTU

Default version status: unaffected

  • Versions 11.06.29 and prioraffected

Schneider Electric Saitel DP RTU

Default version status: unaffected

  • Versions 11.06.34 and prioraffected

References