Home / Items
VulnerabilityKnown exploitedExploit likelihood 72%
Schneider Electric U.motion Builder SQL Injection Vulnerability
CVE-2018-7841 · CISA KEV · April 15, 2022
Summary
A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.
From CISA, quoted as published. Check the source before acting.
What to do
The impacted product is end-of-life and should be disconnected if still in use.
CISA required action, quoted.
Affected products
| Vendor | Product |
|---|---|
| Schneider Electric | U.motion Builder |
Why it's on these mode pages
- Pipeline: Vendor table: Schneider Electric (matched by rule)
Change history
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com