Schneider Electric Software Update (SESU) (Update A)
view advisory published 2018-11-01
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the target system.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-7799US | high7.8 | — | ||
A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targ… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- MitigationSchneider Electric Software Update (SESU)
All controllers should reside in locked cabinets and never be left in the “Program” mode.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan