Lucene search

K
cvelistSchneiderCVELIST:CVE-2019-6840
HistorySep 17, 2019 - 7:19 p.m.

CVE-2019-6840

2019-09-1719:19:36
CWE-134
schneider
www.cve.org

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed.

CNA Affected

[
  {
    "product": "U.motion Server",
    "vendor": "Schneider Electric SE",
    "versions": [
      {
        "status": "affected",
        "version": "MEG6501-0001 - U.motion KNX server"
      },
      {
        "status": "affected",
        "version": "MEG6501-0002 - U.motion KNX Server Plus"
      },
      {
        "status": "affected",
        "version": "MEG6260-0410 - U.motion KNX Server Plus"
      },
      {
        "status": "affected",
        "version": "Touch 10"
      },
      {
        "status": "affected",
        "version": "MEG6260-0415 - U.motion KNX Server Plus"
      },
      {
        "status": "affected",
        "version": "Touch 15"
      }
    ]
  }
]

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

Related for CVELIST:CVE-2019-6840