Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2018-7841

Schneider Electric U.motion Builder SQL Injection Vulnerability

Description

A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.

Recommended action

The impacted product is end-of-life and should be disconnected if still in use.

CISA remediation due date for U.S. federal agencies: 6 May 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.