CVE-2018-7799

published 2018-11-02

CVE-2018-7799: A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute…

high 7.8 CVSS 3.0

AV L AC L PR N UI R S U C H I H A H

A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when placing a specific DLL file.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	software_update_utility	< 2.2.0	2.2.0

CWE-427