Deserialization Vulnerability in Schneider Electric Software Update

CVE-2019-6834

What is CVE-2019-6834?

A vulnerability exists in the Schneider Electric Software Update that can be exploited due to improper handling of untrusted data during deserialization. This security flaw may enable an attacker to gain unauthorized access to execute arbitrary code on the vulnerable system, potentially with full SYSTEM privileges. Exploitation of this vulnerability requires that a malicious user is authenticated, heightening the risk for users of the affected versions of the Software Update. Users are advised to review the latest updates provided by Schneider Electric to safeguard against this risk.

References