CVE-2025-5296

highPriorität · verfolgen · 0EPSS 0.002 · 12. PerzentilEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.22% (12th) EPSS
CVSS 7.3 · high
Is it mine?
56 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-28

CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruption, exposure of application and system information or persistent denial of service when a low-privileged attacker tampers with the installation folder.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenSESUcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric BESS ANSIcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy MiCOM P30cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy MiCOM P40cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy Studiocisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Architecture Buildercisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Automation Device Maintenancecisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Automation Expertcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Automation Expert Motioncisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Control Expertcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Machine Expertcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Machine Expert Basiccisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Machine Expert HVACcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Microgrid Flexcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Microgrid Operations Mediumcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Operator Terminal Expertcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Power Commission Desktop (EPC)cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Power Operations (EPO)cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Process Expertcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Process Expert for AVEVA System Platformcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Harmony XB5S Softcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric PowerLogic P5cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric PowerLogic P7cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric SoMovecisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric ZelioSoft 2cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • BehobenSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric eXLhoist Configuration Softwarecisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • MitigationSESUcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric BESS ANSIcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy MiCOM P30cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy MiCOM P40cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy Studiocisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Architecture Buildercisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Automation Device Maintenancecisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Automation Expertcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Automation Expert Motioncisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Control Expertcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Machine Expertcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Machine Expert Basiccisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Machine Expert HVACcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Microgrid Flexcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Microgrid Operations Mediumcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Operator Terminal Expertcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Power Commission Desktop (EPC)cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Power Operations (EPO)cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Process Expertcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Process Expert for AVEVA System Platformcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Harmony XB5S Softcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric PowerLogic P5cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric PowerLogic P7cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric SoMovecisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric ZelioSoft 2cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric eXLhoist Configuration Softwarecisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.3
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.7–7.3

v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:Hsecondary · CISA US
v3.17.3highAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:Hsecondary · cybersecurity@se.comAusnutzbarkeit 1.8 · Auswirkung 5.5
v4.07highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU
v4.07highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · cybersecurity@se.com
v4.04.7mediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-59USCWE-59USCWE-59US
05

betroffene Produkte (56)

Betroffene Produkte und Versionsbereiche.

20 von 56 angezeigt
06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-25-266-03Schneider Electric SESU2025-08-12icsa · cisa_csaf_otUS

    Schneider Electric is aware of a vulnerability in the Schneider Electric Software Update product (also referred to as “SESU”). The main purpose of the SESU software is to notify customers on the availability of hotfixes or new versions to download and install such updates. Failure to apply the fix provided below may risk attacker to write arbitrary data into protected locations, potentially leading to privilege escalation, arbitrary file corruption, exposure of application and system information or a persistent denial of service condition.

07

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2025-08-18geändert 2026-06-17
09

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan