All CVE records
CVE-2018-7841 — Schneider Electric U.motion Builder SQL Injection Vulnerability
CISA KEV listed
Added April 15, 2022 Remediate by May 6, 2022
Description
A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Notes
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.