Vulnerability Description
A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when placing a specific DLL file.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider-Electric | Software Update Utility | < 2.2.0 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/105951Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-305-02Third Party AdvisoryUS Government Resource
- https://www.schneider-electric.com/en/download/document/SEVD-2018-298-01/Vendor Advisory
- http://www.securityfocus.com/bid/105951Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-305-02Third Party AdvisoryUS Government Resource
- https://www.schneider-electric.com/en/download/document/SEVD-2018-298-01/Vendor Advisory
FAQ
What is CVE-2018-7799?
CVE-2018-7799 is a vulnerability with a CVSS score of 7.8 (HIGH). A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when pla...
How severe is CVE-2018-7799?
CVE-2018-7799 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-7799?
Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Software Update Utility.