CVE-2017-9956
CVE-2017-9956
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
25 Sep 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-coded valid session. An attacker can use that session ID as part of the HTTP cookie of a web request, resulting in authentication bypass
Affected products
Schneider Electric SE · U.MotionWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →