Meg6260 0415 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:schneider-electric:meg6260-0415_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Meg6260 0415 Firmware (1543c056-380c-5382-9ff5-b8d28a8d56a1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-6840 |
vulnerable | 2026-06-08 05:14:13.335747 |
Details available
A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed.
Published: 2019-09-17T19:19:36.000Z
Updated: 2024-08-04T20:31:04.390Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6839 |
vulnerable | 2026-06-08 05:14:13.334761 |
Details available
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to upload a rogue file.
Published: 2019-09-17T19:17:33.000Z
Updated: 2024-08-04T20:31:04.388Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6838 |
vulnerable | 2026-06-08 05:14:13.334114 |
Details available
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to delete a critical file.
Published: 2019-09-17T19:16:38.000Z
Updated: 2024-08-04T20:31:04.356Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6837 |
vulnerable | 2026-06-08 05:14:13.333360 |
Details available
A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could cause server configuration data to be exposed when an attacker modifies a URL.
Published: 2019-09-17T19:15:34.000Z
Updated: 2024-08-04T20:31:04.145Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6836 |
vulnerable | 2026-06-08 05:14:13.331227 |
Details available
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow the file system to access the wrong file.
Published: 2019-09-17T19:14:36.000Z
Updated: 2024-08-04T20:31:04.434Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6835 |
vulnerable | 2026-06-08 05:14:13.328897 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.