CVE-2017-9960

2017-06-2800:00:00

schneider

www.cve.org

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

JSON

An information disclosure vulnerability exists in Schneider Electric’s U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user.

CNA Affected

[
  {
    "product": "U.Motion",
    "vendor": "Schneider Electric SE",
    "versions": [
      {
        "status": "affected",
        "version": "U.motion Builder Versions 1.2.1 and prior."
      }
    ]
  }
]