CVE-2017-9957

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials...

CVE-2017-9957

Schneider Electric’s U.motion Builder software (versions 1.2.1 and prior) contains a web service with a hidden system account that has a hardcoded password. This allows an attacker to authenticate with high-privilege credentials and compromise the system. Remediation: firmware update to Version 1...