Approved changes feed: RSS · Atom

cpe:2.3:a:schneider-electric:software_update:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductSoftware Update (7abd4d20-d2d1-532e-a58a-6458b1d50dc6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-22799 vulnerable 2026-06-08 05:30:01.463461 Details available
A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to an external network when an attacker manages to decrypt the SESU proxy password from the registry. Affected Product: Schneider Electric Software Update, V2.3.0 through V2.5.1
Published: 2022-01-28T19:09:42.000Z
Updated: 2024-08-03T18:51:07.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6834 vulnerable 2026-06-08 05:14:13.323889 Details available
HIGH (7.3)
A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary code on the targeted system with SYSTEM privileges when placing a malicious user to be authenticated for this vulnerability to be successfully exploited. Affected Product: Schneider Electric Software Update (SESU) SUT Service component (V2.1.1 to V2.3.0)
Published: 2022-03-28T16:25:19.000Z
Updated: 2024-08-04T20:31:04.361Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.