CVE-2017-7974

CVE-2017-7974 affects Schneider Electric U.motion Builder (versions 1.2.1 and earlier). The vulnerability is a path traversal flaw in which an unauthenticated attacker can cause information disclosure and, per the NVD entry, potentially execute arbitrary code and exfiltrate files. The primary con...

CVE-2017-7973

A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls to various paths allowing performance of arbitrary SQL commands against the underlying database...

CVE-2017-9959

CVE-2017-9959 affects Schneider Electric U.motion Builder software versions 1.2.1 and earlier. The vulnerability allows an unauthenticated reboot-in-session outcome, enabling a denial-of-service condition with a local attack vector (needs access to the device). The issue has concrete details in c...

CVE-2017-9959

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users, supporting a denial of service condition...

CVE-2017-7974

A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can execute arbitrary code and exfiltrate files...

CVE-2017-9957

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials...

The vulnerability of the configuration of the autonomous configuration device for visualization and control systems called “U.motion Builder” arises from system configuration errors, allowing a perpetrator to execute arbitrary code.

The vulnerability of the configuration of the autonomous configuration tool for the “smart home” visualization and control system, U.motion Builder, exists due to a processing error in the system’s configuration parameters. Exploiting this vulnerability allows an attacker who operates locally to...

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” arises from the use of a constant identifier for the active session, allowing attackers to bypass the authentication process.

The vulnerability of the autonomous configuration tool for the U.motion Builder visualization and control system arises from the use of a constant identifier for the active session. Exploiting this vulnerability allows a malicious actor to bypass the authentication process by using a specially...

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” arises from deficiencies in access control and the disclosure of information in error messages, allowing attackers to read arbitrary files.

The vulnerability of the autonomous configuration tool for the U.motion Builder visualization and control system stems from deficiencies in access control and the disclosure of information in error messages. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” relates to deficiencies in path name restriction, allowing attackers to execute arbitrary code.

The vulnerability of the autonomous configuration tool for the U.motion Builder visualization and control system relates to deficiencies in path name restriction. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code with the privileges of the...

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” arises from an access control error, allowing a intruder to trigger a service failure.

The vulnerability of the autonomous configuration tool for the U.motion Builder visualization and control system stems from an error in access control. Exploiting this vulnerability could allow a malicious actor, operating locally, to cause a service failure by restarting the session...

Schneider Electric U.motion Builder localize.php SQL Injection (CVE-2017-7973)

An SQL injection vulnerability has been reported in Schneider Electric U.motion Builder. The vulnerability is due to insufficient validation of the username HTTP request parameter in requests made to localize.php. A remote, unauthenticated user can exploit this vulnerability by sending a crafted...

Schneider Electric U.motion Builder track_import_export.php SQL Injection (CVE-2017-7973)

An SQL injection vulnerability exists in Schneider Electric U.motion Builder. The vulnerability is due to insufficient validation of the objectid HTTP parameter of the trackimportexport.php request. A remote, unauthenticated user can exploit this vulnerability by sending a crafted HTTP request to...

Siemens Patches Critical Intel AMT Flaw in Industrial Products

Siemens patched two critical vulnerabilities that affected its industrial products this week. One, tied to a recently disclosed flaw in Active Management Technology – a function of certain Intel processors – could have allowed an attacker to gain system privileges. Another vulnerability could hav...

Schneider Electric U.motion Builder (Update A)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: Schneider Electric Equipment: U.motion Builder --------- Begin Update A Part 1 of 5 -------- Vulnerabilities: SQL Injection, Path Traversal, Improper...

Schneider Electric U.motion Builder runscript.php Directory Traversal (CVE-2017-7974)

A directory traversal vulnerability has been reported in Schneider Electric U.motion Builder. This vulnerability is caused by a lack of input validation, and access control to the runscript.php script. A remote, unauthenticated attacker could exploit this vulnerability by sending a malicious...

Schneider Electric U.motion Builder loadtemplate.php SQL Injection (CVE-2017-7973)

An SQL injection vulnerability exists in Schneider Electric U.motion Builder. The vulnerability is due to insufficient validation of the tpl HTTP parameter of the loadtemplate.php request. A remote, unauthenticated user can exploit this vulnerability by sending a crafted HTTP request to the...

Schneider Electric U.motion Builder css.inc.php Arbitrary File Inclusion (CVE-2017-7974)

An arbitrary file inclusion vulnerability exists in Schneider Electric U.motion Builder. This vulnerability is caused by improper sanitization of directory traversal characters.. by css.inc.php. A remote, unauthenticated attacker could exploit this vulnerability by sending a malicious request to...

Schneider Electric U.motion Builder SOAP Remote Code Execution Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in the Schneider Electric U.motion Builder SOAP. The system allows SOAP requests to execute arbitrary SQL commands. An attacker could exploit the vulnerability to execute arbitrary...

Schneider Electric U.motion Builder Information Disclosure Vulnerability

U.motion Builder is a builder product from Schneider Electric France. An information disclosure vulnerability exists in Schneider Electric U.motion Builder. Returns system information to an attacker containing sensitive data. Allowing an attacker to exploit the vulnerability to execute arbitrary...