CVE-2017-9958

An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the system configuration can allow an attacker to execute arbitrary code under the context of root...

CVE-2017-9958

CVE-2017-9958 describes an improper access control in Schneider Electric’s U.motion Builder software (versions 1.2.1 and earlier) that can allow an attacker to execute arbitrary code with root context due to incorrect handling of system configuration. The issue affects U.motion Builder and is cit...

CVE-2017-9957

Schneider Electric’s U.motion Builder software (versions 1.2.1 and prior) contains a web service with a hidden system account that has a hardcoded password. This allows an attacker to authenticate with high-privilege credentials and compromise the system. Remediation: firmware update to Version 1...

CVE-2017-9956

An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-coded valid session. An attacker can use that session ID as part of the HTTP cookie of a web request, resulting in authentication bypass...

CVE-2017-9956

Schneider Electric U.motion Builder software versions 1.2.1 and prior are affected by CVE-2017-9956 due to a hard-coded valid session. An attacker can reuse that session ID in an HTTP cookie to bypass authentication and access the web interface, as described in the NVD entry. The Update A advisor...

CVE-2017-7973

Schneider Electric U.motion Builder software (versions 1.2.1 and prior) is affected by CVE-2017-7973, a SQL injection vulnerability. The issue arises from insufficient input validation in various HTTP endpoints (e.g., track_import_export.php, nfcserver.php, localize.php, loadtemplate.php) that al...

CVE-2017-9959

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users, supporting a denial of service condition...

CVE-2017-9959

CVE-2017-9959 affects Schneider Electric U.motion Builder software versions 1.2.1 and earlier. The vulnerability allows an unauthenticated reboot-in-session outcome, enabling a denial-of-service condition with a local attack vector (needs access to the device). The issue has concrete details in c...

CVE-2017-7974

CVE-2017-7974 affects Schneider Electric U.motion Builder (versions 1.2.1 and earlier). The vulnerability is a path traversal flaw in which an unauthenticated attacker can cause information disclosure and, per the NVD entry, potentially execute arbitrary code and exfiltrate files. The primary con...

CVE-2017-7973

A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls to various paths allowing performance of arbitrary SQL commands against the underlying database...

CVE-2017-7974

A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can execute arbitrary code and exfiltrate files...

CVE-2017-9957

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials...

The vulnerability of the configuration of the autonomous configuration device for visualization and control systems called “U.motion Builder” arises from system configuration errors, allowing a perpetrator to execute arbitrary code.

The vulnerability of the configuration of the autonomous configuration tool for the “smart home” visualization and control system, U.motion Builder, exists due to a processing error in the system’s configuration parameters. Exploiting this vulnerability allows an attacker who operates locally to...

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” arises from deficiencies in access control and the disclosure of information in error messages, allowing attackers to read arbitrary files.

The vulnerability of the autonomous configuration tool for the U.motion Builder visualization and control system stems from deficiencies in access control and the disclosure of information in error messages. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” arises from the use of a constant identifier for the active session, allowing attackers to bypass the authentication process.

The vulnerability of the autonomous configuration tool for the U.motion Builder visualization and control system arises from the use of a constant identifier for the active session. Exploiting this vulnerability allows a malicious actor to bypass the authentication process by using a specially...

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” relates to deficiencies in path name restriction, allowing attackers to execute arbitrary code.

The vulnerability of the autonomous configuration tool for the U.motion Builder visualization and control system relates to deficiencies in path name restriction. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code with the privileges of the...

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” arises from an access control error, allowing a intruder to trigger a service failure.

The vulnerability of the autonomous configuration tool for the U.motion Builder visualization and control system stems from an error in access control. Exploiting this vulnerability could allow a malicious actor, operating locally, to cause a service failure by restarting the session...

Schneider Electric U.motion Builder localize.php SQL Injection (CVE-2017-7973)

An SQL injection vulnerability has been reported in Schneider Electric U.motion Builder. The vulnerability is due to insufficient validation of the username HTTP request parameter in requests made to localize.php. A remote, unauthenticated user can exploit this vulnerability by sending a crafted...

Schneider Electric U.motion Builder track_import_export.php SQL Injection (CVE-2017-7973)

An SQL injection vulnerability exists in Schneider Electric U.motion Builder. The vulnerability is due to insufficient validation of the objectid HTTP parameter of the trackimportexport.php request. A remote, unauthenticated user can exploit this vulnerability by sending a crafted HTTP request to...

Siemens Patches Critical Intel AMT Flaw in Industrial Products

Siemens patched two critical vulnerabilities that affected its industrial products this week. One, tied to a recently disclosed flaw in Active Management Technology – a function of certain Intel processors – could have allowed an attacker to gain system privileges. Another vulnerability could hav...