Schneider Electric U.motion Builder Multiple Security Vulnerabilities

Bugtraq ID:	99344
Class:	Unknown
CVE:	CVE-2017-7973 CVE-2017-7974 CVE-2017-9956 CVE-2017-9957 CVE-2017-9958 CVE-2017-9959 CVE-2017-9960
Remote:	Yes
Local:	Yes
Published:	Jun 30 2017 12:00AM
Updated:	Jun 30 2017 12:00AM
Credit:	rgod working with Trend Micro�??s Zero Day Initiative.
Vulnerable:	Schneider-Electric U.motion Builder 1.2.1
Not Vulnerable:

Schneider Electric U.motion Builder Multiple Security Vulnerabilities

Schneider Electric U.motion Builder is prone to the following multiple security vulnerabilities:

1. An SQL-injection vulnerability
2. A directory-traversal vulnerability
3. An authentication bypass vulnerability
4. An information-disclosure vulnerability
5. A local code-execution vulnerability
6. A local denial-of-Service vulnerability
7. An information-disclosure vulnerability

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database, bypass authentication mechanism, obtain sensitive information, execute arbitrary code and perform unauthorized actions. Failed exploits can result in a denial-of-service condition.

Schneider Electric U.motion Builder 1.2.1 and prior versions are vulnerable.

Schneider Electric U.motion Builder Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Schneider Electric U.motion Builder Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Schneider Electric U.motion Builder Multiple Security Vulnerabilities

References:

• Schneider Electric Homepage (Schneider Electric)
  
• Security Notification - U.motion Builder Software (Schneider Electric)
  
• Advisory (ICSA-17-180-02) Schneider Electric U.motion Builder (CERT)