DLL Hijacking Vulnerability in Schneider Electric Software Update
CVE-2018-7799
7.8HIGH
Key Information:
- Vendor
Schneider Electric
- Vendor
- CVE Published:
- 2 November 2018
What is CVE-2018-7799?
A DLL hijacking vulnerability exists in Schneider Electric Software Update, which affects all versions prior to V2.2.0. This vulnerability allows an attacker to execute arbitrary code on a targeted system if they successfully place a malicious DLL file in a specific location. Exploiting this vulnerability could lead to serious security issues, making it essential for users to update to the latest version to mitigate risks.
Affected Version(s)
Schneider Electric Software Update (SESU), all prior to V2.2.0 Schneider Electric Software Update (SESU), all versions prior to V2.2.0