Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2019-6840

A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Schneider-electric
Products
Meg6260-0410 Meg6260-0410 Firmware Meg6260-0415 and 5 more
CVE-2019-6839

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to upload a rogue file.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Schneider-electric
Products
Meg6260-0410 Meg6260-0410 Firmware Meg6260-0415 and 5 more
CVE-2019-6838

A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to delete a critical file.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Schneider-electric
Products
Meg6260-0410 Meg6260-0410 Firmware Meg6260-0415 and 5 more
CVE-2019-6837

A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could cause server configuration data to be exposed when an attacker modifies a URL.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Schneider-electric
Products
Meg6260-0410 Meg6260-0410 Firmware Meg6260-0415 and 5 more
CVE-2019-6836

A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow the file system to access the wrong file.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Schneider-electric
Products
Meg6260-0410 Meg6260-0410 Firmware Meg6260-0415 and 5 more
CVE-2019-6835

A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to inject client-side script when a user visits a web page.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Schneider-electric
Products
Meg6260-0410 Meg6260-0410 Firmware Meg6260-0415 and 5 more