Schneider Electric Se U.motion
20 CVEs affecting Schneider Electric Se U.motion. Latest disclosed: 2018-07-03. Critical: 3, High: 12.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-9957 | Critical | 9.8 | 2017-09-26 | A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account wit… |
CVE-2017-7974 | Critical | 9.8 | 2017-09-26 | A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthentic… |
CVE-2017-7973 | Critical | 9.8 | 2017-09-26 | A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls… |
CVE-2018-7777 | High | 8.8 | 2018-07-03 | The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software version… |
CVE-2018-7774 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of localize.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite data… |
CVE-2018-7773 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite dat… |
CVE-2018-7772 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of applets which are exposed on the web service in Schneider Electric U.motion Builder software versions prior to v1… |
CVE-2018-7769 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of xmlserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite dat… |
CVE-2018-7768 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of loadtemplate.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite… |
CVE-2018-7767 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of editobject.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite da… |
CVE-2018-7766 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite… |
CVE-2018-7765 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying… |
CVE-2018-7771 | High | 8.0 | 2018-07-03 | The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A directory traversal vu… |
CVE-2017-9958 | High | 7.8 | 2017-09-26 | An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the… |
CVE-2017-9956 | High | 7.3 | 2017-09-26 | An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-co… |
CVE-2018-7770 | Medium | 6.5 | 2018-07-03 | The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The applet allows callers… |
CVE-2017-9960 | Medium | 5.3 | 2017-09-26 | An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error… |
CVE-2018-7776 | Medium | 4.3 | 2018-07-03 | The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attac… |
CVE-2018-7764 | Medium | 4.3 | 2018-07-03 | The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v1.3.4. There is a directory traversal v… |
CVE-2018-7763 | Medium | 4.3 | 2018-07-03 | The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The 'css' parameter contains a directory… |