Schneider-electric

Meg6260-0415 Firmware

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2019-6835

  • EPSS 0.34%
  • Published 17.09.2019 20:15:12
  • Last modified 21.11.2024 04:47:14

A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touc...

7.5

CVE-2019-6836

  • EPSS 0.28%
  • Published 17.09.2019 20:15:12
  • Last modified 21.11.2024 04:47:14

A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch...

9.1

CVE-2019-6837

  • EPSS 0.25%
  • Published 17.09.2019 20:15:12
  • Last modified 21.11.2024 04:47:15

A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server ...

6.5

CVE-2019-6838

  • EPSS 0.15%
  • Published 17.09.2019 20:15:12
  • Last modified 21.11.2024 04:47:15

A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch...

8.8

CVE-2019-6839

  • EPSS 0.51%
  • Published 17.09.2019 20:15:12
  • Last modified 21.11.2024 04:47:15

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motio...

9.8

CVE-2019-6840

  • EPSS 0.5%
  • Published 17.09.2019 20:15:12
  • Last modified 21.11.2024 04:47:15

A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), whic...