Description
CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause
arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file
corruption, exposure of application and system information or persistent denial of service when a low-privileged
attacker tampers with the installation folder.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | SESU | Versions prior to v3.0.12 | — |
Advisories 2
- ICSA-25-266-03 Schneider Electric SESU CISA ICS & IT advisories · Sep 9, 2025
- SEVD-2025-224-03 Schneider Electric Software Update Schneider Electric CPCERT · Sep 9, 2025