Schneider Electric SESU

An attacker with local access to an engineering workstation or server running SESU could write arbitrary files to protected system locations, potentially gaining elevated privileges, corrupting critical files, or causing persistent service failures in the automation platform.

This vulnerability affects Schneider Electric's software update tool (SESU) and downstream automation engineering and operations products used by energy utilities and industrial automation facilities. Specifically, this impacts organizations running EcoStruxure software suites (Automation Expert, Machine Expert, Control Expert, Process Expert, Operator Terminal Expert), PowerLogic power monitoring, Easergy relay management, and other configuration and maintenance tools. Any organization using these products for grid management, microgrid operations, HVAC automation, or equipment commissioning is potentially affected.

An attacker with local access to a machine running SESU (such as a compromised engineering workstation) could exploit an arbitrary file write vulnerability in the software to place malicious code or configuration files in protected directories. This could lead to privilege escalation if the SESU application runs with elevated permissions, or persistent compromise if the malicious files survive application updates.