CVE-2017-9956
—CVSS 3.0
7.3 high
EPSS
1%p63
Published
()
Modified
Description
An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-coded valid session. An attacker can use that session ID as part of the HTTP cookie of a web request, resulting in authentication bypass
- Vendors
- schneider-electric
- Products
- u.motion builder
- Weakness
- CWE-798
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
In the news0 stories
No ingested article mentions this CVE yet.