Vulnerability · Published Aug 18, 2025 · Assigned by schneider
CVE-2025-5296
High 7.3
In plain English
A high-severity security flaw in SESU from Schneider Electric. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Official description
CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruption, exposure of application and system information or persistent denial of service when a low-privileged attacker tampers with the installation folder.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | SESU | Versions prior to v3.0.12 |
Weakness: CWE-59 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H