High ICSA-18-305-02 1 CVE

Schneider Electric Software Update (SESU) (Update A)

Published Nov 1, 2018 · Updated Nov 6, 2018 · Revision 2

Vendor: Schneider Electric Product: Update (SESU)

Summary

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the target system.

Vulnerabilities 1

Unscored —

CVE-2018-7799

A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which …

Schneider Electric Schneider Electric Software Update (SESU), all versions prior to V2.2.0 ICS / OT

Nov 2, 2018

Revision history

2018-11-06 #2
ICSA-18-305-02 Schneider Electric Software Update (SESU) (Update A)
2018-11-01 #1
ICSA-18-305-02 Schneider Electric Software Update (SESU)

References

ICS Advisory ICSA-18-305-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-305-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B