Approved changes feed: RSS · Atom

cpe:2.3:o:schneider-electric:meg6501-0002:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductMeg6501 0002 (78026c62-1006-5406-9637-cbd5842bd1a2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6840 not_vulnerable 2026-06-08 05:14:13.335611 Details available
A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed.
Published: 2019-09-17T19:19:36.000Z
Updated: 2024-08-04T20:31:04.390Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6839 not_vulnerable 2026-06-08 05:14:13.334709 Details available
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to upload a rogue file.
Published: 2019-09-17T19:17:33.000Z
Updated: 2024-08-04T20:31:04.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6838 not_vulnerable 2026-06-08 05:14:13.334062 Details available
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to delete a critical file.
Published: 2019-09-17T19:16:38.000Z
Updated: 2024-08-04T20:31:04.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6837 not_vulnerable 2026-06-08 05:14:13.333308 Details available
A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could cause server configuration data to be exposed when an attacker modifies a URL.
Published: 2019-09-17T19:15:34.000Z
Updated: 2024-08-04T20:31:04.145Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6836 not_vulnerable 2026-06-08 05:14:13.331069 Details available
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow the file system to access the wrong file.
Published: 2019-09-17T19:14:36.000Z
Updated: 2024-08-04T20:31:04.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6835 not_vulnerable 2026-06-08 05:14:13.327337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.