Deserialization of untrusted data

A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary code on the targeted system with SYSTEM privileges when placing a malicious user to be authenticated for this vulnerability to be successfully exploited. Affected Product: Schneide...

CVE-2019-6834

The vulnerability CVE-2019-6834 affects Schneider Electric Software Update (SESU) SUT Service component versions 2.1.1 through 2.3.0. It is a CWE-502 Deserialization of Untrusted Data flaw that could allow an attacker to execute arbitrary code with SYSTEM privileges when placing a malicious user ...

CVE-2019-6834: Deserialization of Untrusted Data

A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary code on the targeted system with SYSTEM privileges when placing a malicious user to be authenticated for this vulnerability to be successfully exploited. Affected Product: Schneide...

PT-2019-5949

Name of the Vulnerable Software and Affected Versions Schneider Electric Software Update SESU SUT Service component versions V2.1.1 through V2.3.0 Description A Deserialization of Untrusted Data issue exists, which could allow an attacker to execute arbitrary code on the targeted system with SYST...