cve-2017-7973

{
  "cvss": 0.0,
  "datePublished": "2026-03-05T00:00:00Z",
  "dateUpdated": "2026-03-05T00:00:00Z",
  "description": "A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls to various paths allowing performance of arbitrary SQL commands against the underlying database.",
  "dueDate": "",
  "id": "CVE-2017-7973",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "u.motion_builder",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "Schneider Electric u.motion_builder Improper Neutralization of Special Elements used in an SQL Command",
  "vendor": "Schneider Electric"
}