Beware of the license manager: how a Schneider Electric software vulnerability puts industrial facilities at risk

The report describes CVE-2024-2658: an Uncontrolled Search Path Element in FlexNet Publisher within Schneider Electric Floating License Manager that uses a hardcoded openssl.cnf path allowing a local non-admin to craft a rogue configuration to load a malicious DLL into lmadmin.exe, potentially enabling privilege escalation to NT AUTHORITY\SYSTEM; it includes exploit details, recommended mitigations (patching, restricting C:\cygwin permissions, hosting FLM on a dedicated server or removing it) and detection guidance using Kaspersky solutions.