CVE-2018-7770 Path traversal in U.Motion
Attackers can exploit a path traversal flaw in sendmail.php to read arbitrary files from the system via email functionality.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2018-7770?
CVE-2018-7770 is a medium-severity path traversal vulnerability in Schneider Electric SE U.Motion, published on 3 Jul 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The applet allows callers to select arbitrary files to send to an arbitrary email address.
Weakness: CWE-22
Which versions are affected by CVE-2018-7770?
It affects 1 product.
Products include Schneider-Electric U.motion.
How do I fix CVE-2018-7770?
No fix has been published for CVE-2018-7770 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2018-7770 being exploited?
There is no known exploitation of CVE-2018-7770 in the wild and no public exploit code.
Other vulnerabilities in Schneider Electric SE U.Motion
Sources
Also known as GHSA-3q62-wpc2-x57g.