CVE-2025-5296

highpriority · track · 0EPSS 0.002 · 12 %ileEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.22% (12th) EPSS
CVSS 7.3 · high
Is it mine?
56 products
Check your exposure
Who says so?
4 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-28

CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruption, exposure of application and system information or persistent denial of service when a low-privileged attacker tampers with the installation folder.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedSESUcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric BESS ANSIcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy MiCOM P30cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy MiCOM P40cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy Studiocisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Architecture Buildercisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Automation Device Maintenancecisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Automation Expertcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Automation Expert Motioncisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Control Expertcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Machine Expertcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Machine Expert Basiccisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Machine Expert HVACcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Microgrid Flexcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Microgrid Operations Mediumcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Operator Terminal Expertcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Power Commission Desktop (EPC)cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Power Operations (EPO)cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Process Expertcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Process Expert for AVEVA System Platformcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Harmony XB5S Softcisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric PowerLogic P5cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric PowerLogic P7cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric SoMovecisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric ZelioSoft 2cisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • FixedSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric eXLhoist Configuration Softwarecisa_csaf_ot

    Version 3.0.12 of SESU includes a fix for this vulnerability and is available for download here: https://www.seupdate.schneiderelectric.com/download/SystemConsistency/Soft wareUpdate/SESU_latest_version/SESU_latest _setup_sfx.exe Follow the installation instructions. If a predecessor version of SESU is already installed, then the update to V3.0.12 will be done automatically as a critical update in the background depending on the “automatic” update configuration.

    https://www.seupdate.schneider-electric.com/download/SystemConsistency/SoftwareUpdate/SESU_latest_version/SESU_latest_setup_sfx.exe
  • MitigationSESUcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric BESS ANSIcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy MiCOM P30cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy MiCOM P40cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Easergy Studiocisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Architecture Buildercisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Automation Device Maintenancecisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Automation Expertcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Automation Expert Motioncisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Control Expertcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Machine Expertcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Machine Expert Basiccisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Machine Expert HVACcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Microgrid Flexcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Microgrid Operations Mediumcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Operator Terminal Expertcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Power Commission Desktop (EPC)cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Power Operations (EPO)cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Process Expertcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric EcoStruxure Process Expert for AVEVA System Platformcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric Harmony XB5S Softcisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric PowerLogic P5cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric PowerLogic P7cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric SoMovecisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric ZelioSoft 2cisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

  • MitigationSchneider Electric SESU Versions prior to v3.0.12 installed on Schneider Electric eXLhoist Configuration Softwarecisa_csaf_ot

    If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: SESU Installation Directory (chosen by the customer at installation time) should not be accessible from the network and only by trusted persons.

02

cvss

Technical severity, 0–10. One row per scoring source.

7.3
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.7–7.3

v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:Hsecondary · CISA US
v3.17.3highAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:Hsecondary · cybersecurity@se.comexploitability 1.8 · impact 5.5
v4.07highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU
v4.07highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · cybersecurity@se.com
v4.04.7mediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-59USCWE-59USCWE-59US
05

affected products (56)

Products and version ranges known to be affected.

showing 20 of 56
06

advisories (1)

Vendor and ecosystem advisories describing this.

  • ICSA-25-266-03Schneider Electric SESU2025-08-12icsa · cisa_csaf_otUS

    Schneider Electric is aware of a vulnerability in the Schneider Electric Software Update product (also referred to as “SESU”). The main purpose of the SESU software is to notify customers on the availability of hotfixes or new versions to download and install such updates. Failure to apply the fix provided below may risk attacker to write arbitrary data into protected locations, potentially leading to privilege escalation, arbitrary file corruption, exposure of application and system information or a persistent denial of service condition.

07

also known as (4)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducisa_csaf_otNVDCVE.orgMITRE
published 2025-08-18modified 2026-06-17
09

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan