Summary
A successful exploit of these vulnerabilities could allow an attacker to execute arbitrary commands or compromise the confidentiality, integrity, and availability of the system.
Vulnerabilities 22
-
Critical 9.8
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, all…
KEV Mar 30, 2023 -
Unscored —
A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in whic…
-
Unscored —
A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions…
-
Unscored —
An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prio…
-
Unscored —
A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web serv…
-
Unscored —
An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and pr…
-
Unscored —
A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system a…
-
Unscored —
An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and pri…
-
Unscored —
The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. T…
-
Unscored —
The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to …
-
Unscored —CVE-2018-7765 Scanner template
The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software v…
-
Unscored —
The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software version…
-
Unscored —
The vulnerability exists within processing of editobject.php in Schneider Electric U.motion Builder software versions p…
-
Unscored —
The vulnerability exists within processing of loadtemplate.php in Schneider Electric U.motion Builder software versions…
-
Unscored —
The vulnerability exists within processing of xmlserver.php in Schneider Electric U.motion Builder software versions pr…
-
Unscored —
The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions pri…
-
Unscored —
The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions p…
-
Unscored —
The vulnerability exists within processing of applets which are exposed on the web service in Schneider Electric U.moti…
-
Unscored —
The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions pr…
-
Unscored —
The vulnerability exists within processing of localize.php in Schneider Electric U.motion Builder software versions pri…
-
Unscored —
The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. Sys…
-
Unscored —
The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider El…
Revision history
-
#3
ICSA-17-180-02 Schneider Electric U.motion Builder (Update B)
-
#1
ICSA-17-180-02 Schneider Electric U.motion Builder
-
#2
ICSA-17-180-02 Schneider Electric U.motion Builder (Update A)
References
-
ICS Advisory ICSA-17-180-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-180-02
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B