Product by Schneider Electric
U.motion Builder software version 1.3.4
24 known vulnerabilities in U.motion Builder software version 1.3.4 (Schneider Electric), 1 of them actively exploited (CISA KEV).
Key figures
24
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2018-7841 | Schneider Electric U.motion Builder SQL Injection Vulnerability In CISA KEV | 9.8 | |
| High | CVE-2018-7777 | Schneider Electric U.Motion: security vulnerability | 8.8 | |
| Critical | CVE-2017-7974 | Schneider Electric U.Motion: Path Traversal | 9.8 | |
| Critical | CVE-2018-7785 | Schneider Electric U.motion Builder: Command Injection | 9.8 | |
| High | CVE-2018-7765 | Schneider Electric U.Motion: SQL Injection | 8.8 | |
| Critical | CVE-2017-9957 | Schneider Electric U.Motion: Hard-coded Credentials | 9.8 | |
| Critical | CVE-2017-7973 | Schneider Electric U.Motion: SQL Injection | 9.8 | |
| High | CVE-2018-7771 | Schneider Electric U.Motion: Path Traversal | 8.0 | |
| High | CVE-2018-7768 | Schneider Electric U.Motion: SQL Injection | 8.8 | |
| High | CVE-2018-7766 | Schneider Electric U.Motion: SQL Injection | 8.8 | |
| High | CVE-2018-7767 | Schneider Electric U.Motion: SQL Injection | 8.8 | |
| High | CVE-2018-7769 | Schneider Electric U.Motion: SQL Injection | 8.8 | |
| High | CVE-2018-7772 | Schneider Electric U.Motion: SQL Injection | 8.8 | |
| High | CVE-2018-7773 | Schneider Electric U.Motion: SQL Injection | 8.8 | |
| High | CVE-2018-7774 | Schneider Electric U.Motion: SQL Injection | 8.8 | |
| High | CVE-2017-9956 | Schneider Electric U.Motion: Authentication Bypass | 7.3 | |
| Medium | CVE-2018-7763 | Schneider Electric U.Motion: Path Traversal | 4.3 | |
| Medium | CVE-2018-7764 | Schneider Electric U.Motion: Path Traversal | 4.3 | |
| Medium | CVE-2018-7787 | Schneider Electric U.motion Builder: security vulnerability | 5.3 | |
| Medium | CVE-2017-9960 | Schneider Electric U.Motion: Information Disclosure | 5.3 | |
| Medium | CVE-2018-7786 | Schneider Electric U.motion Builder: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2017-9958 | Schneider Electric U.Motion: Improper Access Control | 7.8 | |
| Medium | CVE-2018-7776 | Schneider Electric U.Motion: security vulnerability | 4.3 | |
| Medium | CVE-2017-9959 | U.motion Builder software version 1.3.4: Denial of Service | 5.5 |