description: A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials.
problem types: Use of Hardcoded Password
affected:
{
product: U.Motion
vendor: Schneider Electric SE
versions:
status: affected, version: U.motion Builder Versions 1.2.1 and prior.
}