9.8crit
CVE-2018-7841KEVin critical feed1 exploitNuclei template
A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an…
Published 7 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.1 · CNA
CISA KEV
Yes
added 2022-04-15
EPSS
72.5%
percentile 99%
Public exploits
1
Exploit-DB · Nuclei check
Summary
A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of characters is entered.
Known exploited (CISA KEV)
- Added
- 4 y ago
- Due date
- 2022-05-06 (4 y ago)
- Ransomware use
- Unknown
- Required action
- The impacted product is end-of-life and should be disconnected if still in use.
- Vendor / product
- Schneider Electric / U.motion Builder
- CISA name
- Schneider Electric U.motion Builder SQL Injection Vulnerability
CISA SSVC assessment
- Exploitation
- Active — exploited in the wild
- Automatable
- yes
- Technical impact
- total
- Assessed
- 20 mo ago
Exploit prediction (EPSS)
72.49% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.
Exploits and detections
- Nuclei template Schneider Electric U.motion Builder - Remote Code Execution · nuclei detection template
- EDB-46846 Schneider Electric U.Motion Builder 1.3.4 - 'track_import_export.php object_id' Unauthenticated Command Injection · webapps · 2019-05-14
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CISA ADP | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- U.motion U.motion Builder software version 1.3.4
Classification
- Weakness
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command
References
- packetstormsecurity.com /files/152862/Schneider-Electric-U.Motion-Builder-1.3.4-Command-Injection.html · x_refsource_MISC, x_transferred
- seclists.org /fulldisclosure/2019/May/26 · mailing-list, x_refsource_FULLDISC, x_transferred
- schneider-electric.com /ww/en/download/document/SEVD-2019-071-02 · x_refsource_CONFIRM, x_transferred
- cisa.gov /known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7841 · government-resource
Sources
- CVE List: CVE-2018-7841
- NVD: CVE-2018-7841
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.