Schneider-electric Software Update Utility — known CVE vulnerabilities

Every CVE whose affected-product data names Schneider-electric Software Update Utility, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2013-0655 — CVSS 9.3 (critical): The client in Schneider Electric Software Update (SESU) Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which…
• CVE-2018-7799 — CVSS 7.8 (high): A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an…
• CVE-2020-7520 — CVSS 4.7 (medium): A CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability exists in Schneider Electric Software Update (SESU), V2.4.0…