Approved changes feed: RSS · Atom

cpe:2.3:o:schneider-electric:meg6260-0415:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductMeg6260 0415 (d1524b49-217e-5dbb-bd9f-beeea88c4c1e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6840 not_vulnerable 2026-06-08 05:14:13.335763 Details available
A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed.
Published: 2019-09-17T19:19:36.000Z
Updated: 2024-08-04T20:31:04.390Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6839 not_vulnerable 2026-06-08 05:14:13.334778 Details available
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to upload a rogue file.
Published: 2019-09-17T19:17:33.000Z
Updated: 2024-08-04T20:31:04.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6838 not_vulnerable 2026-06-08 05:14:13.334130 Details available
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to delete a critical file.
Published: 2019-09-17T19:16:38.000Z
Updated: 2024-08-04T20:31:04.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6837 not_vulnerable 2026-06-08 05:14:13.333378 Details available
A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could cause server configuration data to be exposed when an attacker modifies a URL.
Published: 2019-09-17T19:15:34.000Z
Updated: 2024-08-04T20:31:04.145Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6836 not_vulnerable 2026-06-08 05:14:13.331248 Details available
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow the file system to access the wrong file.
Published: 2019-09-17T19:14:36.000Z
Updated: 2024-08-04T20:31:04.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6835 not_vulnerable 2026-06-08 05:14:13.329568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.