CVE-2025-5296 - CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause

Back Back to CVE browser

HIGH

CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause

Published Aug 18, 2025

7.0

HIGH

CVSS 4.0

EPSS 0.22%

Description

CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruption, exposure of application and system information or persistent denial of service when a low-privileged attacker tampers with the installation folder.

Affected products

Vendor Schneider Electric Product SESU Default
unaffected
Affected
- Versions prior to v3.0.12

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Schneider Electric	SESU	unaffected	Affected Versions prior to v3.0.12

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-59

References (2)

Link	Providers	Tags
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-224-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-224-03.pdf
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-28481		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner schneider

Published Aug 18, 2025

Updated Aug 18, 2025

Reserved May 28, 2025

Link CVE-2025-5296

CISA Vulnrichment

Updated Aug 18, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-5296

Red Hat

No data

ENISA EUVD

Assigner schneider

Published Aug 18, 2025

Updated Aug 18, 2025

Link EUVD-2025-28481

GitHub

No data