CVE-2018-7777

The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software…

published July 3, 2018

CVSS
—
EPSS
32%
Percentile
98.3
In the wild
Unconfirmed
What it is

The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A remote, authenticated attacker can exploit this vulnerability by sending a crafted request to the target server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.31802 · 98.3th percentile
Published
2018-07-03T14:00Z
EPSS history
Timeline
  • 03 JUL 14:00Z
    The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software…
    cvelistv5