PT-2018-18285 · Schneider Electric · Schneider Electric Software Update
CVE-2018-7799
·
Published
2018-11-02
·
Updated
2018-12-27
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Schneider Electric Software Update (SESU) versions prior to V2.2.0
Description:
A DLL hijacking issue exists, which could allow an attacker to execute arbitrary code on the targeted system when a specific DLL file is placed.
Recommendations:
For versions prior to V2.2.0, update to version V2.2.0 or later to resolve the issue.
Fix
Uncontrolled Search Path Element
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Schneider Electric Software Update