Schneider Electric SE U.Motion
20 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-7777 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Build | HIGH 8.8 | 32 % | ||
| CVE-2018-7776 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is re | MEDIUM 4.3 | 0.7 % | ||
| CVE-2018-7774 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability exists within processing of localize.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The und | HIGH 8.8 | 1.0 % | ||
| CVE-2018-7773 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The un | HIGH 8.8 | 1.0 % | ||
| CVE-2018-7772 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability exists within processing of applets which are exposed on the web service in Schneider Electric U.motion Builder software v | HIGH 8.8 | 1.0 % | ||
| CVE-2018-7771 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A dir | HIGH 8.0 | 1.4 % | ||
| CVE-2018-7770 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The app | MEDIUM 6.5 | 1.3 % | ||
| CVE-2018-7769 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability exists within processing of xmlserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The un | HIGH 8.8 | 1.0 % | ||
| CVE-2018-7768 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability exists within processing of loadtemplate.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The | HIGH 8.8 | 1.0 % | ||
| CVE-2018-7767 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability exists within processing of editobject.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The u | HIGH 8.8 | 1.0 % | ||
| CVE-2018-7766 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. Th | HIGH 8.8 | 1.0 % | ||
| CVE-2018-7765 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3 | HIGH 8.8 | 2.9 % | ||
| CVE-2018-7764 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v1.3.4. There is a di | MEDIUM 4.3 | 1.3 % | ||
| CVE-2018-7763 | U.motion Builder Software, all versions prior to v1.3.4 | The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The 'css' parameter co | MEDIUM 4.3 | 1.3 % | ||
| CVE-2017-9960 | U.motion Builder Versions 1.2.1 and prior. | An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the syste | MEDIUM 5.3 | 1.1 % | ||
| CVE-2017-9958 | U.motion Builder Versions 1.2.1 and prior. | An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an impro | HIGH 7.8 | 0.3 % | ||
| CVE-2017-9957 | U.motion Builder Versions 1.2.1 and prior. | A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden | CRITICAL 9.8 | 1.6 % | ||
| CVE-2017-9956 | U.motion Builder Versions 1.2.1 and prior. | An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system | HIGH 7.3 | 1.1 % | ||
| CVE-2017-7974 | U.motion Builder Versions 1.2.1 and prior. | A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in w | CRITICAL 9.8 | 4.6 % | ||
| CVE-2017-7973 | U.motion Builder Versions 1.2.1 and prior. | A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated | CRITICAL 9.8 | 1.5 % |