CVE-2018-7765

HIGHNuclei

Schneider Electric u.motion_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2018-7765 has a selected CVSS score of 8.8 (high); EIP currently links 1 Nuclei template.

Description

The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jul 4, 2020 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

u.motion_builder

Browse Schneider Electric / u.motion_builder
VulnCheckVersion data not supplied

U.Motion

Browse Schneider Electric SE / U.Motion
CVE ListU.motion Builder Software, all versions prior to v1.3.4affected

Nuclei templates

1
ProjectDiscoveryHIGHSchneider Electric U.motion Builder - SQL InjectionCVSS 8.8

The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.

Impact

Attackers can execute arbitrary SQL commands, potentially leading to data theft, modification, or deletion.

Remediation

Update to version v1.3.4 or later.

WeaknessesCWE-89
Authorsdaffainfo
Template tagscvecve2018schneider-electricsqlivkev
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:schneider-electric:u.motion_builder:*:*:*:*:*:*:*:*
Shodan: http.headers_hash:1985490094
http://seclists.org/fulldisclosure/2019/May/26 https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/

Source: ProjectDiscovery

References

3