CVE-2017-9956
HighSummary
An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior, where the system contains a hard-coded valid session. An attacker can use that session ID as part of the HTTP cookie of a web request.
Risk Assessment
This vulnerability allows an attacker to gain access to the system without proper authentication, potentially leading to unauthorized access to sensitive data.
Recommendation
It is recommended to update the U.motion Builder software to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.
Other vulnerabilities in Schneider Electric U.motion Builder
Original NVD description (English source)
An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-coded valid session. An attacker can use that session ID as part of the HTTP cookie of a web request, resulting in authentication bypass