CVE-2021-22799

Schneider Electric Software Update (SESU) versions 2.3.0–2.5.1 are affected by CWE-331 (Insufficient Entropy). The vulnerability could allow an attacker who decrypts the SESU proxy password stored in the registry to trigger an unintended connection from an internal network to an external network....

CVE-2019-6834

The vulnerability CVE-2019-6834 affects Schneider Electric Software Update (SESU) SUT Service component versions 2.1.1 through 2.3.0. It is a CWE-502 Deserialization of Untrusted Data flaw that could allow an attacker to execute arbitrary code with SYSTEM privileges when placing a malicious user ...