CVE-2019-6834: Deserialization of Untrusted Data

A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary code on the targeted system with SYSTEM privileges when placing a malicious user to be authenticated for this vulnerability to be successfully exploited. Affected Product: Schneide...

PT-2019-5949

Name of the Vulnerable Software and Affected Versions Schneider Electric Software Update SESU SUT Service component versions V2.1.1 through V2.3.0 Description A Deserialization of Untrusted Data issue exists, which could allow an attacker to execute arbitrary code on the targeted system with SYST...