https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:44:00.808805+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-853 certfr-2021-avi-853 — De multiples vulnérabilités ont été découvertes dans les produits Schneider. Certaines d'entre elles permettent à un at… 2026-10-04T06:44:00.813102+00:00 certfr-2021-avi-853 https://cve.radiocsirt.org/vuln/euvd-2026-23155 EUVD-2026-23155 2026-10-04T06:44:00.813139+00:00 EUVD-2026-23155 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22799 fkie_cve-2021-22799 2026-10-04T06:44:00.813155+00:00

A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to an external network when an attacker manages to decrypt the SESU proxy password from the registry. Affected Product: Schneider Electric Software Update, V2.3.0 through V2.5.1

 https://cve.radiocsirt.org/vuln/ghsa-h572-23qr-5763 GHSA-h572-23qr-5763 2026-10-04T06:44:00.813184+00:00

A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to an external network when an attacker manages to decrypt the SESU proxy password from the registry. Affected Product: Schneider Electric Software Update, V2.3.0 through V2.5.1

 https://cve.radiocsirt.org/vuln/gsd-2021-22799 gsd-2021-22799 2026-10-04T06:44:00.813201+00:00 gsd-2021-22799 https://cve.radiocsirt.org/vuln/icsa-21-336-01 ICSA-21-336-01 — Schneider Electric SESU 2026-10-04T06:44:00.813212+00:00

An insufficient entropy vulnerability exists, which could cause unintended connection from an internal network to an external network when an attacker manages to decrypt the SESU proxy password from the registry.CVE-2021-22799 has been assigned to this vulnerability. A CVSS v3 base score of 3.8 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).

 https://cve.radiocsirt.org/vuln/sevd-2021-313-02 SEVD-2021-313-02 — Schneider Electric Software Update 2026-10-04T06:44:00.813231+00:00

Schneider Electric is aware of a vulnerability in its Schneider Electric Software Update product (also referred to as “SESU”), which is used to notify and download updates for other Schneider Electric Software products. To connect to the Internet, the SESU product offers users to manually configure the proxy settings. Due to an improper protection of the saved credentials, it is potentially possible for an attacker to decrypt these credentials.