CVE-2017-9956

An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a…

published September 25, 2017

CVSS
—
EPSS
1%
Percentile
64.7
In the wild
Unconfirmed
What it is

An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-coded valid session. An attacker can use that session ID as part of the HTTP cookie of a web request, resulting in authentication bypass

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01081 · 64.7th percentile
Published
2017-09-25T19:00Z
EPSS history
Timeline
  • 25 SEP 19:00Z
    An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a…
    cvelistv5