CVE-2017-9957
CriticalSummary
A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials.
Risk Assessment
This vulnerability poses a risk of unauthorized access to the system, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update the U.motion Builder software to the latest version to mitigate this vulnerability and reset passwords for all system accounts.
Original NVD description (English source)
A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials.