CISA description
A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.
CVE-2018-7841
Schneider Electric · U.motion Builder
Schneider Electric U.motion Builder SQL Injection Vulnerability
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Notes & references
Where this lands in 800-53
Vulnerability data triggers these controls during assessment and continuous monitoring.