Description
A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when placing a specific DLL file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric SE | Schneider Electric Software Update (SESU), all versions prior to V2.2.0 | Schneider Electric Software Update (SESU), all versions prior to V2.2.0 | — |
Advisories 2
- ICSA-18-331-01 AVEVA Vijeo Citect and Citect SCADA CISA ICS & IT advisories · Nov 27, 2018
- ICSA-18-305-02 Schneider Electric Software Update (SESU) (Update A) CISA ICS & IT advisories · Nov 6, 2018