CVE-2015-3940

CVE-2015-3940 describes an untrusted search path vulnerability in Schneider Electric Wonderware System Platform prior to 2014 R2 Patch 01. This flaw allows a local attacker to gain elevated privileges by introducing a malicious DLL into an unspecified directory. With a CVSS score of 6.9, this vulnerability has high impact on confidentiality, integrity, and availability, though it requires local access and medium attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, despite some media coverage at the time of disclosure.