施耐德 U.motion Builder软件被爆20多个0Day漏洞-阿里云开发者社区

12日，Zero Day网站（ZDI）一口气公布了施耐德20多个0Day，公开的原因是，从漏洞提交给厂商，到发布信息时止，已经超过了ZDI跟厂商约定的120天时间。0Day大多是涉及到 U.motion Builder。内容太多了，大家慢慢看吧。U.motion Builder据说跟楼宇能效管理系统相关。

ZDI-17-392	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder Local Privilege Escalation Vulnerability

ZDI-17-391	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder Embedded Session ID Authentication Bypass Vulnerability

ZDI-17-390	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder css.inc Directory Traversal Information Disclosure Vulnerability

ZDI-17-389	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder runscript Directory Traversal Information Disclosure Vulnerability

ZDI-17-388	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder file_picker Directory Traversal Arbitrary File Upload Remote Code Execution Vulnerability

ZDI-17-387	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder SOAP Request Remote SQL Command Execution Vulnerability

ZDI-17-386	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder Error Message Path Information Disclosure Vulnerability

ZDI-17-385	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder error Information Disclosure Vulnerability

ZDI-17-384	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder editobject SQL Injection Remote Code Execution Vulnerability

ZDI-17-383	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder xmlserver SQL Injection Remote Code Execution Vulnerability

ZDI-17-382	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder track_getdata SQL Injection Remote Code Execution Vulnerability

ZDI-17-381	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder nfcserver SQL Injection Remote Code Execution Vulnerability

ZDI-17-380	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder localize SQL Injection Remote Code Execution Vulnerability

ZDI-17-379	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder syslog_getdata SQL Injection Remote Code Execution Vulnerability

ZDI-17-378	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder track_import_export SQL Injection Remote Code Execution Vulnerability

ZDI-17-377	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder HTTP Cookie SQL Injection Remote Code Execution Vulnerability

ZDI-17-376	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder editscript Directory Traversal Remote Code Execution Vulnerability

ZDI-17-375	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder message_simple_html reboot Parameter Denial of Service Vulnerability

ZDI-17-374	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder loadtemplate SQL Injection Remote Code Execution Vulnerability

ZDI-17-373	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder sendmail email_attachment Parameter Absolute Path Traversal Information Disclosure Vulnerability

ZDI-17-372	CVE:	Published: 2017-06-12
(0Day) Schneider Electric U.motion Builder Hard-Coded Password Remote Code Execution Vulnerability

原文发布时间：2017年6月13日

本文由：zeroday发布，版权归属于原作者

原文链接:http://toutiao.secjia.com/schneider-u-motion-builder-exposes-0day-vulnerabilities

本文来自云栖社区合作伙伴安全加，了解相关信息可以关注安全加网站