CVE-2018-7841: Schneider Electric U.motion Builder SQL Injection Vulnerability
A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered. Required action: The impacted product is end-of-life and should be disconnected if still in use.
· high severity · unattributed attribution
Evidence and provenance
- Original source
- CISA KEV report ↗
- Published
- 2022-04-15T00:00:00Z
- Confidence basis
- No actor match
- Record ID
74b863347bc25b92d18c
Vulnerabilities
CVE-2018-7841
Affected sectors
energy, technology
Use and citation
Verify the original report before making operational decisions. Cite this permanent page together with the original source, publication date, confidence level, and review status.