Software Update Utility
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider-electric:software_update_utility:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Software Update Utility (4259ac04-6a98-522e-9ecf-0ab07199a6c8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-7520 |
vulnerable | 2026-06-08 05:27:13.360559 |
Details available
A CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability exists in Schneider Electric Software Update (SESU), V2.4.0 and prior, which could cause execution of malicious code on the victim's machine. In order to exploit this vulnerability, an attacker requires privileged access on the engineering workstation to modify a Windows registry key which would divert all traffic updates to go through a server in the attacker's possession. A man-in-the-middle attack is then used to complete the exploit.
Published: 2020-07-23T20:46:33.000Z
Updated: 2024-08-04T09:33:19.592Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7799 |
vulnerable | 2026-06-08 05:12:04.272654 |
Details available
A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when placing a specific DLL file.
Published: 2018-11-02T17:00:00.000Z
Updated: 2024-08-05T06:37:59.240Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.