Approved changes feed: RSS · Atom

cpe:2.3:a:cve-2019-6837:u.motion_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCve 2019 6837 (0bca7922-4a6e-5f05-a66c-f4d03a436051)
ProductU.Motion Server (f6970c32-55da-54c5-b07a-ecece9b6fe18)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6837 vulnerable 2026-06-08 05:14:13.333194 Details available
A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could cause server configuration data to be exposed when an attacker modifies a URL.
Published: 2019-09-17T19:15:34.000Z
Updated: 2024-08-04T20:31:04.145Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.