CVE-2018-7787

In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request...

CVE-2018-7769

The vulnerability exists within processing of xmlserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter...

CVE-2018-7765

Schneider Electric U.motion Builder is affected by CVE-2018-7765 via track_import_export.php, where the SQLite query on object_id is vulnerable to SQL injection. Affected versions are prior to v1.3.4. Exploitation could lead to arbitrary SQL execution with high impact (C/H/I/H) as per CVSS3, with...

CVE-2018-7774

CVE-2018-7774 affects Schneider Electric U.motion Builder localize.php, where an SQLite query on the username parameter is vulnerable to SQL injection in versions prior to 1.3.4. The issue stems from improper input handling in the localize.php processing path, enabling an attacker to manipulate t...

CVE-2018-7772

The CVE-2018-7772 issue affects Schneider Electric U.motion Builder (pre-1.3.4) and is caused by SQL injection in the loginSeed handling within applets exposed via the web service. The underlying SQLite query used to verify a user is logged in is vulnerable and can be embedded in the HTTP cookie,...

Schneider Electric U.motion Builder Command Injection Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A command injection vulnerability exists in Schneider Electric U.motion Builder, which allows attackers to exploit the vulnerability to bypass authentication...

Schneider Electric U.motion Builder Cross-Site Scripting Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A cross-site scripting vulnerability exists in Schneider Electric U.motion Builder, which allows attackers to exploit the vulnerability to inject malicious scripts and perform cross-site attacks...

Schneider Electric U.motion Builder

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: U.motion Builder Vulnerabilities: Command Injection, Cross-site Scripting, and Improper Input Validation 2. RISK EVALUATION Successful exploitation of these...

Schneider Electric U.motion Builder Remote Code Execution Vulnerability (CNVD-2018-07819)

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in the publicly available applet on the Schneider Electric U.motion Builder web service. Since the underlying SQLite database query is affected by the logininfo parameter which can b...

Schneider Electric U.motion Builder Information Disclosure Vulnerability (CNVD-2018-07820)

U.motion Builder is a generator product from Schneider Electric France. An information disclosure vulnerability exists in Schneider Electric U.motion Builder externalframe.php. An attacker can exploit the vulnerability to obtain information about the path returned by an exception message...

Schneider Electric U.motion Builder Remote Code Execution Vulnerability (CNVD-2018-07816)

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in Schneider Electric U.motion Builder due to insufficient handling of the updatefile request parameter on updatemodule.php. An authenticated remote attacker can execute arbitrary co...

Schneider Electric U.motion Builder nfcserver.php SQL Injection (CVE-2017-7973)

An SQL injection vulnerability exists in Schneider Electric U.motion Builder. The vulnerability is due to insufficient validation of the sessionid HTTP request parameter in requests made to nfcserver.php.A remote, unauthenticated user can exploit this vulnerability by sending a crafted HTTP reque...

CVE-2017-9956

An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-coded valid session. An attacker can use that session ID as part of the HTTP cookie of a web request, resulting in authentication bypass...

CVE-2017-7974

A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can execute arbitrary code and exfiltrate files...

CVE-2017-7973

A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls to various paths allowing performance of arbitrary SQL commands against the underlying database...

CVE-2017-9959

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users, supporting a denial of service condition...

CVE-2017-9956

An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-coded valid session. An attacker can use that session ID as part of the HTTP cookie of a web request, resulting in authentication bypass...

CVE-2017-9957

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials...

CVE-2017-9960

An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user...

CVE-2017-9958

An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the system configuration can allow an attacker to execute arbitrary code under the context of root...