CVE-2018-7787: Input Validation
Published Jul 3, 2018
·Updated
In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request.
Affected Software
1 affected component
Schneider-electric U.motion Builder<1.3.4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Schneider Electric U.motion Builderto a version that resolves this vulnerability.Fixed in v1.3.4
Event History
Jul 3, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Data Sourced
via NVD·02:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2018-7787.
2
What is the severity of CVE-2018-7787?
The severity of CVE-2018-7787 is medium with a severity value of 5.3.
3
What is the affected software for CVE-2018-7787?
The affected software for CVE-2018-7787 is Schneider Electric U.motion Builder software versions prior to v1.3.4.
4
What is the CWE ID for CVE-2018-7787?
The CWE ID for CVE-2018-7787 is CWE-20.
5
How can I fix CVE-2018-7787?
To fix CVE-2018-7787, update Schneider Electric U.motion Builder software to version 1.3.4 or later.