CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-05-22
Schneider Electric U.motion Builder SQL Injection and Remote Code Execution Vulnerability (CVE-2018-7841) Security Advisory
[Affected Scope] Schneider Electric U.motion Builder software version 1.3.4
[Impact] Unauthenticated remote attackers can execute arbitrary code with elevated privileges by injecting malicious SQL commands into vulnerable input fields
[Mitigation] Immediately upgrade to the patched version provided by the vendor, or restrict network access to the device from the public internet