CVE Record
[ CRITICAL ]CVE-2018-7841
Schneider Electric U.motion Builder SQL Injection Vulnerability
A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.
- Vendor
- Schneider Electric
- Product
- U.motion Builder
- CVSS
- 9.8
- EPSS (exploit probability)
- 72.7%
- Status
- kev
- CISA patch-by (BOD 22-01)
- Published
A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.
Added to CISA’s Known Exploited Vulnerabilities catalog on 2022-04-15. Required action per CISA: The impacted product is end-of-life and should be disconnected if still in use. Due date: 2022-05-06.
This is an auto-synced KEV catalog record pending a full 0dayNews write-up — see CISA’s KEV catalog and the NVD record linked above for primary sources.