Schneider Electric Software Update (SESU)

An attacker with administrative credentials on an engineering workstation could exploit a redirect vulnerability in SESU to conduct phishing attacks or inject malicious code during software update operations, potentially compromising the integrity of firmware deployed to operational devices.

Electric utilities and energy infrastructure operators using Schneider Electric SESU for firmware and software distribution should prioritize this update. SESU is typically run on engineering workstations that manage PLCs, intelligent electronic devices (IEDs), and other field equipment. A compromise of the update process could affect the integrity of all connected devices.

An attacker with high-privilege access to SESU could manipulate the update process through a redirect vulnerability (CWE-601) to direct the software update mechanism to malicious sources, allowing injection of compromised firmware or code into connected industrial devices.