Skip to content
OpenAdvisories
High ICSA-25-266-03 1 CVE

Schneider Electric SESU

Published Aug 12, 2025 · Updated Sep 9, 2025 · Revision 2

Vendor: Schneider Electric Product: BESS ANSI Product: Easergy MiCOM P30 Product: Easergy MiCOM P40 Product: Easergy Studio Product: EcoStruxure Architecture Builder Product: EcoStruxure Automation Device Maintenance Product: EcoStruxure Automation Expert - Motion Product: EcoStruxure Control Expert Product: EcoStruxure Machine Expert Product: EcoStruxure Machine Expert – Basic Product: EcoStruxure Microgrid Flex Product: EcoStruxure Microgrid Operations Medium Product: EcoStruxure Operator Terminal Expert Product: EcoStruxure Power Commission Desktop (EPC) Product: EcoStruxure Power Operations (EPO) Product: EcoStruxure™ Automation Expert Product: Ecostruxure™ Machine Expert HVAC Product: EcoStruxure™ Process Expert Product: EcoStruxure™ Process Expert for AVEVA System Platform Product: eXLhoist Configuration Software Product: Harmony XB5S Soft Product: PowerLogic P5 Product: PowerLogic™ P7 Product: SESU Product: SoMove Product: ZelioSoft 2

Summary

Schneider Electric is aware of a vulnerability in the Schneider Electric Software Update product (also referred
to as “SESU”).
The main purpose of the SESU software is to notify customers on the availability of hotfixes or new versions to
download and install such updates.
Failure to apply the fix provided below may risk attacker to write arbitrary data into protected locations,
potentially leading to privilege escalation, arbitrary file corruption, exposure of application and system
information or a persistent denial of service condition.

Vulnerabilities 1

Revision history

  1. #2.0.0

    SESU as standalone added to known-affected and fixed.

  2. #1.0.0

    Original Release

References