CVE-2017-9957: vulnerability in Schneider Electric SE U.Motion
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.6%
A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials.
Affected products
Schneider Electric SE · U.MotionRelated CVEs — Schneider Electric SE U.Motion
In the same product, most dangerous first.