| Package | Affected versions | Patched versions |
|---|---|---|
| software update utility | = 1.0= 1.0.13= 1.1 |
The client in Schneider Electric Software Update (SESU) Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free