CVE-2013-0655

The client in Schneider Electric Software Update SESU Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80...

CVE-2013-0655: Improper Input Validation

The client in Schneider Electric Software Update SESU Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80...

PT-2013-2505

Name of the Vulnerable Software and Affected Versions Schneider Electric Software Update SESU Utility versions 1.0.x through 1.1.x Description The issue allows man-in-the-middle attackers to spoof updates and execute arbitrary code by modifying the data stream on TCP port 80, due to the client no...