Skip to main content

Meg6260 0410 Firmware

6 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2019-6840 Sep 17, 20:15 CRITICAL Act Now

A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Schneider Electric Meg6501 0001 Firmware Meg6501 0002 Firmware Meg6260 0410 Firmware +1
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2019-6839 Sep 17, 20:15 HIGH This Week

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 -. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

File Upload Schneider Electric Meg6501 0001 Firmware Meg6501 0002 Firmware Meg6260 0410 Firmware +1
NVD
CVSS 3.1
8.8
EPSS
1.1%
CVE-2019-6838 Sep 17, 20:15 MEDIUM This Month

A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Schneider Electric Meg6501 0001 Firmware Meg6501 0002 Firmware Meg6260 0410 Firmware +1
NVD
CVSS 3.1
6.5
EPSS
0.8%
CVE-2019-6837 Sep 17, 20:15 CRITICAL Act Now

A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SSRF Schneider Electric Meg6501 0001 Firmware Meg6501 0002 Firmware Meg6260 0410 Firmware +1
NVD
CVSS 3.1
9.1
EPSS
1.0%
CVE-2019-6836 Sep 17, 20:15 HIGH This Week

A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Schneider Electric Meg6501 0001 Firmware Meg6501 0002 Firmware Meg6260 0410 Firmware +1
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2019-6835 Sep 17, 20:15 MEDIUM This Month

A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus,. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Schneider Electric Meg6501 0001 Firmware Meg6501 0002 Firmware Meg6260 0410 Firmware +1
NVD
CVSS 3.1
5.4
EPSS
0.5%
CVE-2019-6840
EPSS 1% CVSS 9.8
CRITICAL Act Now

A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Schneider Electric Meg6501 0001 Firmware +3
NVD
CVE-2019-6839
EPSS 1% CVSS 8.8
HIGH This Week

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 -. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

File Upload Schneider Electric Meg6501 0001 Firmware +3
NVD
CVE-2019-6838
EPSS 1% CVSS 6.5
MEDIUM This Month

A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Schneider Electric Meg6501 0001 Firmware +3
NVD
CVE-2019-6837
EPSS 1% CVSS 9.1
CRITICAL Act Now

A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SSRF Schneider Electric Meg6501 0001 Firmware +3
NVD
CVE-2019-6836
EPSS 1% CVSS 7.5
HIGH This Week

A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Schneider Electric Meg6501 0001 Firmware +3
NVD
CVE-2019-6835
EPSS 1% CVSS 5.4
MEDIUM This Month

A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus,. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Schneider Electric Meg6501 0001 Firmware +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy