Security vulnerabilities identified in Schneider Electric and OpenWRT-based devices

Security researchers have identified critical vulnerabilities affecting different classes of IoT and networking hardware.

In Schneider Electric’s U.Motion Builder, an unauthenticated Remote Code Execution (RCE) vulnerability, designated as CVE-2018-7841, was discovered. The flaw stems from an SQL injection vulnerability in the track_import_export.php file, where the object_id input parameter allows attackers to execute arbitrary commands against the SQLite database. This issue persists as a bypass to a previously attempted fix, and the product was retired in March 2019 following the report.

Separately, a vulnerability (CVE-2018-10123) has been found in Inteno’s IOPSYS firmware, which may impact all OpenWRT or LEDE-based routers utilizing the p910nd printer server. An authenticated user can manipulate the printer server configuration to read or append to any file with root privileges, leading to information disclosure and remote code execution.