CVE-2017-9959: A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which...

Security readout for executives and security teams

CVE-2017-9959 affects Schneider Electric U.motion Builder 1.2.1 and prior. The software can accept a reboot-related session action from an unauthenticated user, creating a denial-of-service risk. The supplied sources do not provide CVSS scoring, active exploitation evidence, or detailed remediation text. Exposure is most likely where Schneider Electric U.motion Builder 1.2.1 or earlier is installed and reachable by untrusted users or networks. The bundle does not establish internet exposure prevalence or whether runtime U.motion systems are affected. Prioritize this where U.motion Builder supports building operations or customer-facing facilities. The issue can cause service disruption, but the available evidence is incomplete and does not support claims of active exploitation or critical severity. Mitigation focus: Review Schneider Electric advisory SEVD-2017-178-01 for vendor-approved fixes or workarounds.; Inventory U.motion Builder installations and identify versions 1.2.1 or earlier.; Restrict access to U.motion Builder systems to trusted administration networks only..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.