CVE-2017-7974 (u.motion_builder)
A path traversal information disclosure vulnerability exists in Schneider Electric’s U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can execute arbitrary code and exfiltrate files.
Source: CVE-2017-7974 (u.motion_builder)