Schneider Electric U.motion Builder vulnerabilities

24 CVEs affecting Schneider Electric U.motion Builder, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7841, published 2019-05-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-7841: Schneider Electric U.motion Builder SQL Injection Vulnerability, published 2019-05-22. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-04-15. EPSS: 72.7% chance of exploitation in the next 30 days. A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of characters is entered.
CVE-2018-7777, published 2018-07-03. High severity, CVSS 8.8. EPSS: 31.8% chance of exploitation in the next 30 days. The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A remote,…
CVE-2017-7974, published 2017-09-26. Critical severity, CVSS 9.8. EPSS: 4.6% chance of exploitation in the next 30 days. A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can execute arbitrary code and…
CVE-2018-7785, published 2018-07-03. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. In Schneider Electric U.motion Builder software versions prior to v1.3.4, a remote command injection allows authentication bypass.
CVE-2018-7765, published 2018-07-03. High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days. The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL…
CVE-2017-9957, published 2017-09-26. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can…
CVE-2017-7973, published 2017-09-26. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls to various paths allowing performance of…
CVE-2018-7771, published 2018-07-03. High severity, CVSS 8.0. EPSS: 1.4% chance of exploitation in the next 30 days. The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A directory traversal vulnerability allows a caller with…
CVE-2018-7764, published 2018-07-03. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v1.3.4. There is a directory traversal vulnerability in the processing of the…
CVE-2018-7763, published 2018-07-03. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The 'css' parameter contains a directory traversal vulnerability.

Latest

CVE-2018-7787, published 2018-07-03. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request.
CVE-2018-7786, published 2018-07-03. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. In Schneider Electric U.motion Builder software versions prior to v1.3.4, a cross site scripting (XSS) vulnerability exists which could allow injection of malicious scripts.
CVE-2018-7776, published 2018-07-03. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data.
CVE-2018-7774, published 2018-07-03. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. The vulnerability exists within processing of localize.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection…
CVE-2018-7773, published 2018-07-03. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection…
CVE-2018-7772, published 2018-07-03. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. The vulnerability exists within processing of applets which are exposed on the web service in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database…