CVE-2017-9960: Schneider Electric U.motion Builder

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user.

Affected products

• Schneider Electric U.motion Builder: up to and including 1.2.1

Published 2017-09-26. Last modified 2026-06-17.