Approved changes feed: RSS · Atom

cpe:2.3:a:schneider_electric_se:u.motion_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric Se (25d1a66d-bfb8-5d1c-9a6c-4a2405fe5386)
ProductU.Motion Server (01225b42-f601-563d-9bec-26ebf643938c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6840 vulnerable 2026-06-03 14:40:40.859015 Details available
A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed.
Published: 2019-09-17T19:19:36.000Z
Updated: 2024-08-04T20:31:04.390Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6835 vulnerable 2026-06-03 14:40:40.846259 Details available
A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to inject client-side script when a user visits a web page.
Published: 2019-09-17T19:13:26.000Z
Updated: 2024-08-04T20:31:04.391Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.