PT-2018-18285 · Schneider Electric · Schneider Electric Software Update

Publicado 2018-11-02 · Atualizado 2018-12-27 · CVE-2018-7799

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Schneider Electric Software Update (SESU) versions prior to V2.2.0

Description: A DLL hijacking issue exists, which could allow an attacker to execute arbitrary code on the targeted system when a specific DLL file is placed.

Recommendations: For versions prior to V2.2.0, update to version V2.2.0 or later to resolve the issue.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2018-7799

Produtos afetados

Schneider Electric Software Update

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-7799 · Nota de Segurança
• https://schneider-electric.com/en/download/document/SEVD-2018-298-01 · Aviso do Fabricante
• http://securityfocus.com/bid/105951 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-18-305-02 · Nota
• https://osv.dev/vulnerability/CVE-2018-7799 · Aviso do Fabricante