CVE-2018-7766

CVE-2018-7766: vulnerability in Schneider Electric SE U.Motion

Published · Updated

Follow this CVE+ Monitor U.Motion

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter.
Affected products
Schneider Electric SE · U.Motion
Related CVEs — Schneider Electric SE U.Motion

In the same product, most dangerous first.

CVE-2018-7777—CVE-2018-7777EPSS 31.8%CVE-2017-7974—CVE-2017-7974EPSS 4.6%CVE-2018-7765—CVE-2018-7765EPSS 2.9%CVE-2017-9957—CVE-2017-9957EPSS 1.6%CVE-2017-7973—CVE-2017-7973EPSS 1.5%CVE-2018-7771—CVE-2018-7771EPSS 1.4%