Schneider Electric U.motion Builder (Update A)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: Schneider Electric Equipment: U.motion Builder --------- Begin Update A Part 1 of 5 -------- Vulnerabilities: SQL Injection, Path Traversal, Improper...

Schneider Electric U.motion Builder runscript.php Directory Traversal (CVE-2017-7974)

A directory traversal vulnerability has been reported in Schneider Electric U.motion Builder. This vulnerability is caused by a lack of input validation, and access control to the runscript.php script. A remote, unauthenticated attacker could exploit this vulnerability by sending a malicious...

Schneider Electric U.motion Builder loadtemplate.php SQL Injection (CVE-2017-7973)

An SQL injection vulnerability exists in Schneider Electric U.motion Builder. The vulnerability is due to insufficient validation of the tpl HTTP parameter of the loadtemplate.php request. A remote, unauthenticated user can exploit this vulnerability by sending a crafted HTTP request to the...

Schneider Electric U.motion Builder css.inc.php Arbitrary File Inclusion (CVE-2017-7974)

An arbitrary file inclusion vulnerability exists in Schneider Electric U.motion Builder. This vulnerability is caused by improper sanitization of directory traversal characters.. by css.inc.php. A remote, unauthenticated attacker could exploit this vulnerability by sending a malicious request to...

Schneider Electric U.motion Builder SOAP Remote Code Execution Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in the Schneider Electric U.motion Builder SOAP. The system allows SOAP requests to execute arbitrary SQL commands. An attacker could exploit the vulnerability to execute arbitrary...

Schneider Electric U.motion Builder editobject remote code execution vulnerability

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in the Schneider Electric U.motion Builder editobject. The underlying SQLite database query requires SQL injection on the type input parameter. A remote attacker could exploit the...

Schneider Electric U.motion Builder track_import_export remote code execution vulnerability

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in Schneider Electric U.motion Builder trackimportexport. When the export operation is selected in an applet call, the underlying SQLite database query requires SQL injection of the...

Schneider Electric U.motion Builder Information Disclosure Vulnerability

U.motion Builder is a builder product from Schneider Electric France. An information disclosure vulnerability exists in Schneider Electric U.motion Builder. Returns system information to an attacker containing sensitive data. Allowing an attacker to exploit the vulnerability to execute arbitrary...

Schneider Electric U.motion Builder loadtemplate remote code execution vulnerability

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in the Schneider Electric U.motion Builder loadtemplate. The underlying SQLite database query requires SQL injection on the tpl input parameter. A remote attacker could exploit this...

Schneider Electric U.motion Builder css.inc Directory Traversal Vulnerability

U.motion Builder is a generator product from Schneider Electric France. A directory traversal vulnerability exists in Schneider Electric U.motion Builder css.inc. An attacker could exploit the vulnerability to expose files...

Schneider Electric U.motion Builder Embedded Session ID Authentication Bypass Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A session ID authentication bypass vulnerability exists in Schneider Electric U.motion Builder Embedded. The application has a hard-coded static session ID.By embedding the session ID in an HTTP cookie, an attacker can bypass t...

Schneider Electric U.motion Builder Hardcoded Remote Code Execution Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A hard-coded remote code execution vulnerability exists in Schneider Electric U.motion Builder. The web service comes with a hidden system account that contains hard-coded passwords. An attacker could exploit the vulnerability ...

Schneider Electric U.motion Builder Remote Code Execution Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in Schneider Electric U.motion Builder. The underlying SQLite database query performs SQL injection on the username input parameter. A remote attacker can exploit the vulnerability t...

Schneider Electric U.motion Builder runscript directory traversal vulnerability

U.motion Builder is a builder product from Schneider Electric France. A directory traversal vulnerability exists in the Schneider Electric U.motion Builder runscript. When handling the 's' parameter of a small application. An attacker could exploit the vulnerability to expose files from the syste...

Schneider Electric U.motion Builder Error Message Path Vulnerability

U.motion Builder is a builder product from Schneider Electric France. An error message path vulnerability exists in Schneider Electric U.motion Builder. An exception message containing sensitive path information is returned to an attacker. This allows an attacker to exploit the vulnerability to...

Schneider Electric U.motion Builder Local Elevation of Privilege Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A local elevation of privilege vulnerability exists in Schneider Electric U.motion Builder. The network management account is set to function as sudo without a password. An attacker can exploit the vulnerability to execute...

(0Day) Schneider Electric U.motion Builder css.inc Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose files on vulnerable installations of Schneider Electric U.motion Builder. Authentication is not required to exploit this vulnerability. The specific flaw exists within css.inc.php. The 'css' parameter contains a directory traversal...

(0Day) Schneider Electric U.motion Builder Local Privilege Escalation Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Schneider Electric U.motion Builder. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the system configuration. The web administration account is s...

(0Day) Schneider Electric U.motion Builder Embedded Session ID Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Schneider Electric U.motion Builder. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of session management. The application has a hard-code...

(0Day) Schneider Electric U.motion Builder loadtemplate SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Schneider Electric U.motion Builder. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of loadtemplate.php, which is exposed on the web servic...