SESU Security Notification CVE-2025-5296
This document details a high-severity vulnerability (CVE-2025-5296) in the Schneider Electric Software Update (SESU) product, specifically a CWE-59 "Link Following" flaw that could allow a low-privileged attacker to write arbitrary data to protected locations. The notification provides remediation via SESU version 3.0.12 and lists affected products, including EcoStruxure, Harmony, and PowerLogic series, along with mitigations for customers who cannot immediately apply the patch.
Failed to load PDF
Download insteadYou might also like
AP9834 USB Wi-Fi Device Technical Specifications
8 pages
SR2COM01 GSM Modem Quick Start Guide
8 pages
AP7922 Switched Rack PDU Installation and Quick Start
26 pages
BAS 2800+ Integrator Software Description
4 pages
STP120, STP220, STP620 Water Temperature Sensor Specifications
2 pages
EcoStruxure Geo SCADA Expert and ClearSCADA Log Injection Vulnerability Notification
4 pages
Default Passwords on Internet-Connected Systems Vulnerability Disclosure
3 pages
Vijeo Citect V7.20 What's New
2 pages
AD v3 Wi-Fi Module Specifications
3 pages
EcoStruxure Power for Semiconductor Fabs Reference Guide
72 pages