ICSA-21-336-01

icsaUScisa_csaf_ot

Schneider Electric SESU

view advisory published 2021-12-02

Successful exploitation of this vulnerability could cause unintended connection from an internal network to an external network.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-22799USlow3.8—
A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to an external network when an attacker manages to decrypt the…
02

references

External citations — patches, advisories, analysis.

03

remediations (1)

  • MitigationSchneider Electric Software Update

    If SESU is installed (assuming SESU is configured as “managed product” inside the SESU application) it will indicate a security update is available. Click to download and install the new SESU version.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan