CVE-2020-7520

Schneider Electric Software Update (SESU)

CVE-2013-0655

The CVE-2013-0655 issue affects Schneider Electric Software Update (SESU) Utility, specifically versions 1.0.x and 1.1.x. The root cause is that the SESU client does not verify the origin of updates, enabling a man-in-the-middle to spoof updates by tampering with the data stream over TCP port 80,...

CVE-2018-7799

CVE-2018-7799 corresponds to a DLL hijacking vulnerability in Schneider Electric Software Update (SESU) prior to v2.2.0. The issue is classified as CWE-427 Uncontrolled Search Path Element and can allow an attacker with local access to place a crafted DLL and execute arbitrary code on the target ...