meg6501-0002_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/meg6501-0002_firmware/ Sun, 26 Feb 2023 06:34:05 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png meg6501-0002_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/meg6501-0002_firmware/ 32 32 CVE-2019-6835 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6835/ Sun, 26 Feb 2023 06:34:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6835/ A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 – U.motion KNX server, MEG6501-0002 – U.motion KNX Server Plus, MEG6260-0410 – U.motion KNX Server Plus, Touch 10, MEG6260-0415 – U.motion KNX Server Plus, Touch 15), which could allow an attacker to inject client-side script when a user visits a web page.

The post CVE-2019-6835 appeared first on CVE Vulnerability.

]]> A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 – U.motion KNX server, MEG6501-0002 – U.motion KNX Server Plus, MEG6260-0410 – U.motion KNX Server Plus, Touch 10, MEG6260-0415 – U.motion KNX Server Plus, Touch 15), which could allow an attacker to inject client-side script when a user visits a web page.

The post CVE-2019-6835 appeared first on CVE Vulnerability.

]]> CVE-2019-6836 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6836/ Sun, 26 Feb 2023 06:34:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6836/ A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 – U.motion KNX server, MEG6501-0002 – U.motion KNX Server Plus, MEG6260-0410 – U.motion KNX Server Plus, Touch 10, MEG6260-0415 – U.motion KNX Server Plus, Touch 15), which could allow the file system to access the wrong file.

The post CVE-2019-6836 appeared first on CVE Vulnerability.

]]> A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 – U.motion KNX server, MEG6501-0002 – U.motion KNX Server Plus, MEG6260-0410 – U.motion KNX Server Plus, Touch 10, MEG6260-0415 – U.motion KNX Server Plus, Touch 15), which could allow the file system to access the wrong file.

The post CVE-2019-6836 appeared first on CVE Vulnerability.

]]> CVE-2019-6837 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6837/ Sun, 26 Feb 2023 06:34:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6837/ A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 – U.motion KNX server, MEG6501-0002 – U.motion KNX Server Plus, MEG6260-0410 – U.motion KNX Server Plus, Touch 10, MEG6260-0415 – U.motion KNX Server Plus, Touch 15), which could cause server configuration data to be exposed when an attacker modifies a URL.

The post CVE-2019-6837 appeared first on CVE Vulnerability.

]]> A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 – U.motion KNX server, MEG6501-0002 – U.motion KNX Server Plus, MEG6260-0410 – U.motion KNX Server Plus, Touch 10, MEG6260-0415 – U.motion KNX Server Plus, Touch 15), which could cause server configuration data to be exposed when an attacker modifies a URL.

The post CVE-2019-6837 appeared first on CVE Vulnerability.

]]> CVE-2019-6838 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6838/ Sun, 26 Feb 2023 06:34:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6838/ A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 – U.motion KNX server, MEG6501-0002 – U.motion KNX Server Plus, MEG6260-0410 – U.motion KNX Server Plus, Touch 10, MEG6260-0415 – U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to delete a critical file.

The post CVE-2019-6838 appeared first on CVE Vulnerability.

]]> A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 – U.motion KNX server, MEG6501-0002 – U.motion KNX Server Plus, MEG6260-0410 – U.motion KNX Server Plus, Touch 10, MEG6260-0415 – U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to delete a critical file.

The post CVE-2019-6838 appeared first on CVE Vulnerability.

]]> CVE-2019-6839 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6839/ Sun, 26 Feb 2023 06:34:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6839/ A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 – U.motion KNX server, MEG6501-0002 – U.motion KNX Server Plus, MEG6260-0410 – U.motion KNX Server Plus, Touch 10, MEG6260-0415 – U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to upload a rogue file.

The post CVE-2019-6839 appeared first on CVE Vulnerability.

]]> A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 – U.motion KNX server, MEG6501-0002 – U.motion KNX Server Plus, MEG6260-0410 – U.motion KNX Server Plus, Touch 10, MEG6260-0415 – U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to upload a rogue file.

The post CVE-2019-6839 appeared first on CVE Vulnerability.

]]> CVE-2019-6840 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6840/ Sun, 26 Feb 2023 06:34:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6840/ A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 – U.motion KNX server, MEG6501-0002 – U.motion KNX Server Plus, MEG6260-0410 – U.motion KNX Server Plus, Touch 10, MEG6260-0415 – U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to […]

The post CVE-2019-6840 appeared first on CVE Vulnerability.

]]> A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 – U.motion KNX server, MEG6501-0002 – U.motion KNX Server Plus, MEG6260-0410 – U.motion KNX Server Plus, Touch 10, MEG6260-0415 – U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed.

The post CVE-2019-6840 appeared first on CVE Vulnerability.

]]>