CVE-2017-7973 | BDVDB-2026-90897 Detail

Schneider Electric SEU.Motion

Description#

A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls to various paths allowing performance of arbitrary SQL commands against the underlying database.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/
http://www.securityfocus.com/bid/99344

Exploit#

No public exploit known

History#

Version 12017-09-25Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.