Description
An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric SE | U.Motion | U.motion Builder Versions 1.2.1 and prior. | — |
Advisories 1
- ICSA-17-180-02 Schneider Electric U.motion Builder (Update A) CISA ICS & IT advisories · Jan 8, 2019