CVE Catalog
CVE-2017-7974
CriticalSummary
A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior, allowing an unauthenticated user to execute arbitrary code and exfiltrate files.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and disclosure of sensitive data, posing a significant security threat to the organization.
Recommendation
It is recommended to update the U.motion Builder software to the latest version to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can execute arbitrary code and exfiltrate files.