CVE-2018-7841

Schneider Electric U.motion Builder SQL Injection Vulnerability

Schneider Electric U.motion BuilderIndustrial & IoT

CVSS

9.8Critical

ExploitationExploited in the wildAdded to KEV 15 Apr 2022CISA KEV

Exploit odds (EPSS)72.7%Chance of exploitation activity in the next 30 days, higher than 99% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed inNone listedNo source names a fixed version yet

Federal deadline6 May 2022Remediation due date for US federal agenciesCISA KEV

CISA required actionThe impacted product is end-of-life and should be disconnected if still in use. CISA KEV

What fixes it

No source in this snapshot names a fixed version.

Timeline

14 May 2019Exploit code publicExploit-DB
22 May 2019, 19:20 UTCPublishedCVE List
15 Apr 2022Added to CISA KEVCISA KEV

Public exploit code and templates 2

Webapps exploitSchneider Electric U.Motion Builder 1.3.4 - 'track_import_export.php object_id' Unauthenticated Command Injection 14 May 2019Exploit-DB
Scanner templateSchneider Electric U.motion Builder - Remote Code ExecutionNuclei

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Description

A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.

Text from CVE List

Affected versions 1

U.motion Builder software version 1.3.4affected: U.motion Builder software version 1.3.4CVE List