Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-6840

A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Pl

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric SE U.motion Server

  • MEG6501-0001 - U.motion KNX serveraffected
  • MEG6501-0002 - U.motion KNX Server Plusaffected
  • MEG6260-0410 - U.motion KNX Server Plusaffected
  • Touch 10affected
  • MEG6260-0415 - U.motion KNX Server Plusaffected
  • Touch 15affected

References