PT-2018-18269 · Schneider Electric · U.Motion Builder

Published 2018-07-03 · Updated 2018-08-28 · CVE-2018-7772

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Schneider Electric U.motion Builder versions prior to 1.3.4

Description: The issue exists in the processing of applets exposed on the web service. It involves a SQL injection vulnerability in the underlying SQLite database query, which checks if a user is logged in. The loginSeed parameter is susceptible to this injection and can be embedded in the HTTP cookie of the request.

Recommendations: For versions prior to 1.3.4, update to version 1.3.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable applets to minimize the risk of exploitation. Avoid using the loginSeed parameter in the affected HTTP cookie until the issue is resolved.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2018-7772

Affected Products

U.Motion Builder

References · 3

• https://osv.dev/vulnerability/CVE-2018-7772 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7772 · Security Note
• https://schneider-electric.com/en/download/document/SEVD-2018-095-01 · Vendor Advisory