Denial of Service Vulnerability in Schneider Electric's U.motion Builder Software
CVE-2017-9959

5.5MEDIUM

Key Information:

Vendor
Schneider Electric
Status
U.motion Builder
Vendor
CVE Published:
25 September 2017

Summary

A vulnerability in Schneider Electric's U.motion Builder software allows unauthenticated users to send a reboot command, potentially leading to a denial of service. This flaw in the application can be exploited to disrupt service availability, emphasizing the need for timely patching and robust security measures to protect networked systems.

References

http://www.schneider-electric.com/en/download/document/SE...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/99344
vdb-entryx_refsource_BID

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.