Schneider Electric recently patched four vulnerabilities in its U.motion Builder software, including two critical command execution flaws. Advisories have been published by both the vendor and ICS-CERT.
http://feedproxy.google.com/~r/Securityweek/~3/vD6Y6SJ5sJo/critical-flaws-patched-schneider-building-automation-software
