CVE-2018-7776: Schneider Electric U.motion Builder

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data.

Affected products

• Schneider Electric U.motion Builder: before 1.3.4 (fixed in 1.3.4)

Published 2018-07-03. Last modified 2026-06-17.