Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character. Per: http://cwe.mitre.org/data/definitions/428.html
"CWE-428: Unquoted Search Path or Element" Per: http://ics-cert.us-cert.gov/advisories/ICSA-14-058-01
"This license manager is used in the following Schneider Electric products:
Power Monitoring Expert,
Struxureware process Expert (PES),
Struxureware process Expert libraries,
Vijeo Citect (SCADA), and
Vijeo Citect Historian."
Publication date: Fri, 28 Feb 2014 12:18:00 +0000