Sign-up

ID

VAR-201301-0373


CVE

CVE-2013-0655


TITLE

Schneider Electric Software Update Utility Arbitrary client code execution vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2013-001221

DESCRIPTION

The client in Schneider Electric Software Update (SESU) Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80. Schneider Electric provides total solutions for the energy and infrastructure, industrial, data center and network, building and residential markets in more than 100 countries. The SESU tool used by several of these products is used to update software on Windows PC systems. The Schneider Electric software on the customer's PC uses the SESU service as the communication mechanism for the Schneider Electric Center Update Server, which can be used to receive software updates on a regular basis. The SESU client on the client PC does not check the authenticity of the source. By redirecting the message to port 80 of the unauthorized source, the attacker can execute arbitrary code on the system. ---------------------------------------------------------------------- The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/ ---------------------------------------------------------------------- TITLE: Schneider Electric Multiple Products SESU Update Spoofing Vulnerability SECUNIA ADVISORY ID: SA51849 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/51849/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=51849 RELEASE DATE: 2013-01-17 DISCUSS ADVISORY: http://secunia.com/advisories/51849/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/51849/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=51849 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: A vulnerability has been reported in multiple Schneider Electric products, which can be exploited by malicious people to conduct spoofing attacks. The vulnerability is caused due to the Schneider-Electric Software Update (SESU) utility insecurely validating new updates and can be exploited to e.g. spoof an update via Man-in-the-Middle (MitM) attacks. The vulnerability is reported in the following products and versions: * IDS version 1.0 * IDS version 2.0 * PowerSuite version 2.5 * Smart Widget Acti 9 version 1.0.0.0 * Smart Widget H8035 version 1.0.0.0 * Smart Widget H8036 version 1.0.0.0 * Smart Widget PM210 version 1.0.0.0 * Smart Widget PM710 version 1.0.0.0 * Smart Widget PM750 version 1.0.0.0 * SoMachine version 1.2.1 * Spacial.pro versions 1.0.0.x * SESU versions 1.0.x * SESU versions 1.1.x * Unity Pro version 5.0 * Unity Pro version 6.0 * Unity Pro version 6.1 * Unity Pro version 4.1 * Vijeo Designer versions 6.0.x * Vijeo Designer versions 6.1.0.x * Vijeo Designer versions 5.0.0.x * Vijeo Designer versions 5.1.0.x * Vijeo Designer Opti versions 6.0.x * Vijeo Designer Opti versions 5.1.0.x * Vijeo Designer Opti versions 5.0.0.x * Web Gate Client Files version 5.1.x SOLUTION: Update the SESU client to a fixed version. PROVIDED AND/OR DISCOVERED BY: The vendor credits Arthur Gervais. ORIGINAL ADVISORY: Schneider: http://download.schneider-electric.com/files?p_File_Id=29960974&p_File_Name=SEVD-2013-009-01.pdf ICS-CERT: http://www.us-cert.gov/control_systems/pdf/ICSA-13-016-01.pdf OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.79

sources: NVD: CVE-2013-0655 // JVNDB: JVNDB-2013-001221 // CNVD: CNVD-2013-00414 // BID: 57438 // IVD: 2193e6c4-2353-11e6-abef-000c29c66e3d // VULHUB: VHN-60657 // PACKETSTORM: 119621

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: 2193e6c4-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-00414

AFFECTED PRODUCTS

vendor:schneider electricmodel:software update utilityscope:eqversion:1.0.13

Trust: 1.6

vendor:schneider electricmodel:software update utilityscope:eqversion:1.1

Trust: 1.6

vendor:schneider electricmodel:software update utilityscope:eqversion:1.0

Trust: 1.6

vendor:schneider electricmodel:software updatescope:eqversion:1.0.x

Trust: 0.8

vendor:schneider electricmodel:software updatescope:eqversion:1.1.x

Trust: 0.8

vendor:schneidermodel:electric smart widget h8035scope:eqversion:1.0.0.0

Trust: 0.6

vendor:schneidermodel:electric smart widget pm201scope:eqversion:1.0.0.0

Trust: 0.6

vendor:schneidermodel:electric somachinescope:eqversion:1.2.1

Trust: 0.6

vendor:schneidermodel:electric spacail.proscope:eqversion:1.0.0.x

Trust: 0.6

vendor:schneidermodel:electric sesuscope:eqversion:1.0.x1.1.x

Trust: 0.6

vendor:schneidermodel:electric smart widget h8036scope:eqversion:1.0.0.0

Trust: 0.6

vendor:schneidermodel:electric smart widget pm710scope:eqversion:1.0.0.0

Trust: 0.6

vendor:schneidermodel:electric smart widget pm750scope:eqversion:1.0.0.0

Trust: 0.6

vendor:schneidermodel:electric unity proscope:eqversion:6.0

Trust: 0.3

vendor:update utilitymodel: - scope:eqversion:1.0

Trust: 0.2

vendor:update utilitymodel: - scope:eqversion:1.0.13

Trust: 0.2

vendor:update utilitymodel: - scope:eqversion:1.1

Trust: 0.2

sources: IVD: 2193e6c4-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-00414 // BID: 57438 // JVNDB: JVNDB-2013-001221 // CNNVD: CNNVD-201301-373 // NVD: CVE-2013-0655

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2013-0655
value: HIGH

Trust: 1.0

NVD: CVE-2013-0655
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201301-373
value: CRITICAL

Trust: 0.6

IVD: 2193e6c4-2353-11e6-abef-000c29c66e3d
value: CRITICAL

Trust: 0.2

VULHUB: VHN-60657
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2013-0655
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

IVD: 2193e6c4-2353-11e6-abef-000c29c66e3d
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

VULHUB: VHN-60657
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: IVD: 2193e6c4-2353-11e6-abef-000c29c66e3d // VULHUB: VHN-60657 // JVNDB: JVNDB-2013-001221 // CNNVD: CNNVD-201301-373 // NVD: CVE-2013-0655

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-60657 // JVNDB: JVNDB-2013-001221 // NVD: CVE-2013-0655

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201301-373

TYPE

Input validation

Trust: 0.8

sources: IVD: 2193e6c4-2353-11e6-abef-000c29c66e3d // CNNVD: CNNVD-201301-373

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2013-001221

PATCH
title:Top Pageurl:http://www.schneider-electric.com/
Trust: 0.8
title:SE Software Update Utility Vulnerability Disclosureurl:http://www.schneider-electric.com/download/ww/en/details/29960967-SE-Software-Update-Utility-Vulnerability-Disclosure/?reference=SEVD-2013-009-01
Trust: 0.8
title:サポートurl:http://www.schneider-electric.co.jp/sites/japan/jp/support/contact/we-care.page
Trust: 0.8
title:トップページurl:http://www.schneider-electric.com/site/home/index.cfm/jp/
Trust: 0.8
title:Schneider Electric Patch for Multiple Product Source Validation Vulnerabilitiesurl:https://www.cnvd.org.cn/patchInfo/show/30091
Trust: 0.6
title:progupdatesv100url:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=45396
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2013-00414 // 
            
            
            
            JVNDB: JVNDB-2013-001221 // 
            
            
            
            CNNVD: CNNVD-201301-373

EXTERNAL IDS
db:NVDid:CVE-2013-0655
Trust: 3.6
db:ICS CERTid:ICSA-13-016-01
Trust: 3.5
db:SCHNEIDERid:SEVD-2013-009-01
Trust: 2.1
db:CNNVDid:CNNVD-201301-373
Trust: 0.9
db:SECUNIAid:51849
Trust: 0.9
db:CNVDid:CNVD-2013-00414
Trust: 0.8
db:JVNDBid:JVNDB-2013-001221
Trust: 0.8
db:BIDid:57438
Trust: 0.4
db:IVDid:2193E6C4-2353-11E6-ABEF-000C29C66E3D
Trust: 0.2
db:VULHUBid:VHN-60657
Trust: 0.1
db:PACKETSTORMid:119621
Trust: 0.1
sources:
            
            
            IVD: 2193e6c4-2353-11e6-abef-000c29c66e3d // 
            
            
            
            CNVD: CNVD-2013-00414 // 
            
            
            
            VULHUB: VHN-60657 // 
            
            
            
            BID: 57438 // 
            
            
            
            JVNDB: JVNDB-2013-001221 // 
            
            
            
            PACKETSTORM: 119621 // 
            
            
            
            CNNVD: CNNVD-201301-373 // 
            
            
            
            NVD: CVE-2013-0655

REFERENCES
url:http://www.us-cert.gov/control_systems/pdf/icsa-13-016-01.pdf
Trust: 3.5
url:http://www.schneider-electric.com/download/ww/en/details/29960967-se-software-update-utility-vulnerability-disclosure/?reference=sevd-2013-009-01
Trust: 1.7
url:http://www2.schneider-electric.com/corporate/en/support/cybersecurity/viewer-news.page?c_filepath=/templatedata/content/news/data/en/local/cybersecurity/general_information/2013/01/20130109_advisory_of_vulnerability_affecting_schneider_electric_s_software_upda.xml
Trust: 1.7
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-0655
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-0655
Trust: 0.8
url:http://secunia.com/advisories/51849
Trust: 0.6
url:http://download.schneider-electric.com/files?p_file_id=29960974&p_file_name=sevd-2013-009-01.pdf
Trust: 0.4
url:http://www.schneider-electric.com/site/home/index.cfm/ww/?selectcountry=true
Trust: 0.3
url:http://secunia.com/vulnerability_intelligence/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=51849
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:http://secunia.com/advisories/51849/
Trust: 0.1
url:http://secunia.com/blog/325/
Trust: 0.1
url:http://secunia.com/advisories/51849/#comments
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2013-00414 // 
            
            
            
            VULHUB: VHN-60657 // 
            
            
            
            BID: 57438 // 
            
            
            
            JVNDB: JVNDB-2013-001221 // 
            
            
            
            PACKETSTORM: 119621 // 
            
            
            
            CNNVD: CNNVD-201301-373 // 
            
            
            
            NVD: CVE-2013-0655

CREDITS
Arthur Gervais
Trust: 0.3
sources:
            
            
            BID: 57438

SOURCES
db:IVDid:2193e6c4-2353-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2013-00414
db:VULHUBid:VHN-60657
db:BIDid:57438
db:JVNDBid:JVNDB-2013-001221
db:PACKETSTORMid:119621
db:CNNVDid:CNNVD-201301-373
db:NVDid:CVE-2013-0655

LAST UPDATE DATE
2025-04-11T23:18:55.556000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2013-00414date:2013-01-21T00:00:00
db:VULHUBid:VHN-60657date:2013-01-22T00:00:00
db:BIDid:57438date:2015-03-19T08:44:00
db:JVNDBid:JVNDB-2013-001221date:2013-01-23T00:00:00
db:CNNVDid:CNNVD-201301-373date:2013-01-22T00:00:00
db:NVDid:CVE-2013-0655date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:IVDid:2193e6c4-2353-11e6-abef-000c29c66e3ddate:2013-01-21T00:00:00
db:CNVDid:CNVD-2013-00414date:2013-01-21T00:00:00
db:VULHUBid:VHN-60657date:2013-01-21T00:00:00
db:BIDid:57438date:2013-01-16T00:00:00
db:JVNDBid:JVNDB-2013-001221date:2013-01-23T00:00:00
db:PACKETSTORMid:119621date:2013-01-17T07:44:12
db:CNNVDid:CNNVD-201301-373date:2013-01-21T00:00:00
db:NVDid:CVE-2013-0655date:2013-01-21T16:55:01.793