Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability exists in Schneider Electric Software Update (SESU), V2.4.0 and prior, which could cause execution of malicious code on the victim's machine. In order to exploit this vulnerability, an attacker requires privileged access on the engineering workstation to modify a Windows registry key which would divert all traffic updates to go through a server in the attacker's possession. A man-in-the-middle attack is then used to complete the exploit.
CVSS Information
N/A
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Vulnerability Title
Schneider Electric Software Update 输入验证错误漏洞
Vulnerability Description
Schneider Electric Software Update是法国施耐德电气（Schneider Electric）公司的一款用于Schneider Electric产品的软件更新工具。 Schneider Electric Software Update (SESU) V2.4.0之前版本中存在输入验证错误漏洞。攻击者可利用该漏洞执行恶意代码。
CVSS Information
N/A
Vulnerability Type
N/A