Vulnerability Description
An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the system configuration can allow an attacker to execute arbitrary code under the context of root.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider-Electric | U.Motion Builder | <= 1.2.1 |
Related Weaknesses (CWE)
References
- http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/Vendor Advisory
- http://www.securityfocus.com/bid/99344Third Party AdvisoryVDB Entry
- http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/Vendor Advisory
- http://www.securityfocus.com/bid/99344Third Party AdvisoryVDB Entry
FAQ
What is CVE-2017-9958?
CVE-2017-9958 is a vulnerability with a CVSS score of 7.8 (HIGH). An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the system configuration can allow an attack...
How severe is CVE-2017-9958?
CVE-2017-9958 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-9958?
Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric U.Motion Builder.