A critical link following vulnerability in Schneider Electric SESU allows low-privileged local attackers to corrupt system files or escalate privileges.

This is a CWE-59 Improper Link Resolution Before File Access vulnerability, which occurs because the application fails to securely handle symbolic links during file operations. A low-privileged attacker can exploit this flaw by manipulating the installation folder to redirect file writes to sensitive system locations.

The ability for a low-privileged user to write arbitrary data to protected locations poses a severe risk to system integrity and confidentiality. With a CVSS score of 7.3, this high-severity flaw could lead to full privilege escalation, persistent denial of service, or the unauthorized exposure of critical system information, significantly undermining the security posture of the affected infrastructure.

Immediate Action: Upgrade to Schneider Electric SESU version 3.0.12 or later immediately to apply the vendor-supplied security fix.

Proactive Monitoring: Monitor system logs for unauthorized file access attempts or anomalous folder modifications within the installation directory.

Compensating Controls: Restrict write permissions on the application installation directory to only the necessary service accounts to prevent unauthorized users from creating malicious symbolic links.

Public Exploit Available: No

Given the potential for privilege escalation and system corruption, administrators should prioritize updating Schneider Electric SESU to the latest version. Ensure that all local file system permissions are correctly configured to follow the principle of least privilege, as this serves as a critical secondary defense against link-based exploitation.