CVE-2018-7787

In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request...

CVE-2018-7772

The CVE-2018-7772 issue affects Schneider Electric U.motion Builder (pre-1.3.4) and is caused by SQL injection in the loginSeed handling within applets exposed via the web service. The underlying SQLite query used to verify a user is logged in is vulnerable and can be embedded in the HTTP cookie,...

CVE-2018-7769

CVE-2018-7769 affects Schneider Electric U.motion Builder (XML server) prior to version 1.3.4. The root cause is an SQL injection in the id input parameter processed by xmlserver.php, allowing unauthorized access to the underlying SQLite database. The NVD/NVD-affiliated and ICS documentation note...

CVE-2018-7769

The vulnerability exists within processing of xmlserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter...

CVE-2018-7773

CVE-2018-7773 affects Schneider Electric U.motion Builder software prior to v1.3.4. The vulnerability is in nfcserver.php where the underlying SQLite query is vulnerable to SQL injection via the sessionid parameter. Consequences are described in the CVSS metrics as high impact for confidentiality...

CVE-2018-7774

CVE-2018-7774 affects Schneider Electric U.motion Builder localize.php, where an SQLite query on the username parameter is vulnerable to SQL injection in versions prior to 1.3.4. The issue stems from improper input handling in the localize.php processing path, enabling an attacker to manipulate t...

CVE-2018-7765

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter...

CVE-2018-7765

Schneider Electric U.motion Builder is affected by CVE-2018-7765 via track_import_export.php, where the SQLite query on object_id is vulnerable to SQL injection. Affected versions are prior to v1.3.4. Exploitation could lead to arbitrary SQL execution with high impact (C/H/I/H) as per CVSS3, with...

CVE-2018-7763

The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The 'css' parameter contains a directory traversal vulnerability...

CVE-2018-7764

Schneider Electric U.motion Builder (affected: runscript.php applet) contains a directory traversal vulnerability in the processing of the 's' parameter for versions prior to v1.3.4. Impact details from CVE-2018-7764 indicate potential local path disclosure; the advised fix is firmware update to ...

CVE-2018-7764

The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v1.3.4. There is a directory traversal vulnerability in the processing of the 's' parameter of the applet...

Schneider Electric U.motion Builder Command Injection Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A command injection vulnerability exists in Schneider Electric U.motion Builder, which allows attackers to exploit the vulnerability to bypass authentication...

Schneider Electric U.motion Builder Cross-Site Scripting Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A cross-site scripting vulnerability exists in Schneider Electric U.motion Builder, which allows attackers to exploit the vulnerability to inject malicious scripts and perform cross-site attacks...

Schneider Electric U.motion Builder

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: U.motion Builder Vulnerabilities: Command Injection, Cross-site Scripting, and Improper Input Validation 2. RISK EVALUATION Successful exploitation of these...

Schneider Electric U.motion Builder Remote Code Execution Vulnerability (CNVD-2018-07819)

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in the publicly available applet on the Schneider Electric U.motion Builder web service. Since the underlying SQLite database query is affected by the logininfo parameter which can b...

Schneider Electric U.motion Builder Information Disclosure Vulnerability (CNVD-2018-07820)

U.motion Builder is a generator product from Schneider Electric France. An information disclosure vulnerability exists in Schneider Electric U.motion Builder externalframe.php. An attacker can exploit the vulnerability to obtain information about the path returned by an exception message...

Schneider Electric U.motion Builder Remote Code Execution Vulnerability (CNVD-2018-07816)

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in Schneider Electric U.motion Builder due to insufficient handling of the updatefile request parameter on updatemodule.php. An authenticated remote attacker can execute arbitrary co...

Schneider Electric U.motion Builder nfcserver.php SQL Injection (CVE-2017-7973)

An SQL injection vulnerability exists in Schneider Electric U.motion Builder. The vulnerability is due to insufficient validation of the sessionid HTTP request parameter in requests made to nfcserver.php.A remote, unauthenticated user can exploit this vulnerability by sending a crafted HTTP reque...

CVE-2017-7974

A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can execute arbitrary code and exfiltrate files...

CVE-2017-9959

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users, supporting a denial of service condition...