CVE-2017-9959

Name of the Vulnerable Software and Affected Versions U.motion Builder versions 1.2.1 and prior

Description A vulnerability exists in the system where it accepts reboot in session from unauthenticated users, supporting a denial of service condition. The issue is caused by an access control error, which can be exploited by a local attacker to cause a denial of service by restarting the session.

Recommendations For U.motion Builder versions 1.2.1 and prior, consider restricting access to the system to prevent unauthenticated users from rebooting the session until a fix is available. As a temporary workaround, restrict the ability for unauthenticated users to interact with the system to minimize the risk of exploitation.