CVE-2013-0655

The client in Schneider Electric Software Update (SESU) Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80.

• CWE-20

• http://www.schneider-electric.com/download/ww/en/details/29960967-SE-Software-Update-Utility-Vulnerability-Disclosure/?reference=SEVD-2013-009-01
• http://www.us-cert.gov/control_systems/pdf/ICSA-13-016-01.pdfUS Government Resource
• http://www2.schneider-electric.com/corporate/en/support/cybersecurity/viewer-news.page?c_filepath=/templatedata/Content/News/data/en/local/cybersecurity/general_information/2013/01/20130109_advisory_of_vulnerability_affecting_schneider_electric_s_software_upda.xmlVendor Advisory
• http://www.schneider-electric.com/download/ww/en/details/29960967-SE-Software-Update-Utility-Vulnerability-Disclosure/?reference=SEVD-2013-009-01
• http://www.us-cert.gov/control_systems/pdf/ICSA-13-016-01.pdfUS Government Resource
• http://www2.schneider-electric.com/corporate/en/support/cybersecurity/viewer-news.page?c_filepath=/templatedata/Content/News/data/en/local/cybersecurity/general_information/2013/01/20130109_advisory_of_vulnerability_affecting_schneider_electric_s_software_upda.xmlVendor Advisory

Published

Jan 21, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-0649Use-after-free vulnerability in Adobe Flash Player before 10…
• CVE-2013-0650Use-after-free vulnerability in Adobe Flash Player before 10…
• CVE-2013-0651The Portal installation process in GE Intelligent Platforms …
• CVE-2013-0652GE Intelligent Platforms Proficy Real-Time Information Porta…
• CVE-2013-0653Directory traversal vulnerability in substitute.bcl in the W…
• CVE-2013-0654CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA -…
• CVE-2013-0656Buffer overflow in a third-party ActiveX component in Siemen…
• CVE-2013-0657Stack-based buffer overflow in Schneider Electric Interactiv…
• CVE-2013-0658Heap-based buffer overflow in RFManagerService.exe in Schnei…
• CVE-2013-0659The debugging feature on the Siemens CP 1604 and CP 1616 int…
• CVE-2013-0662Multiple stack-based buffer overflows in ModbusDrv.exe in Sc…
• CVE-2013-0663Cross-site request forgery (CSRF) vulnerability on the Schne…