Schneider-Electric Meg6260-0415
6 CVEs affecting Schneider-Electric Meg6260-0415. Latest disclosed: 2019-09-17. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-6840 | Critical | 9.8 | 2019-09-17 | A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U… |
CVE-2019-6837 | Critical | 9.1 | 2019-09-17 | A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server P… |
CVE-2019-6839 | High | 8.8 | 2019-09-17 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion… |
CVE-2019-6836 | High | 7.5 | 2019-09-17 | A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG626… |
CVE-2019-6838 | Medium | 6.5 | 2019-09-17 | A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG626… |
CVE-2019-6835 | Medium | 5.4 | 2019-09-17 | A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG62… |