CVE-2019-6834

HIGH 7.8CVE-2019-6834 · Published 13/04/2022 · updated 17/06/2026

In short

CVE-2019-6834 is a HIGH (CVSS 7.8) vulnerability affecting software update (schneider-electric).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
software update schneider-electric	`≥ 2.1.1, ≤ 2.3.0`	No fix yet

Description

A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary code on the targeted system with SYSTEM privileges when placing a malicious user to be authenticated for this vulnerability to be successfully exploited. Affected Product: Schneider Electric Software Update (SESU) SUT Service component (V2.1.1 to V2.3.0)

References

se.com/ww/en/download/document/SEVD-2019-225-06 · Vendor Advisory

More vulnerabilities in software update

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free