CVE-2019-6835

A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to inject client-side script when a user visits a web page.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:schneider-electric:meg6501-0001_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:meg6501-0001:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:schneider-electric:meg6501-0002_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:meg6501-0002:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:schneider-electric:meg6260-0410_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:meg6260-0410:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:schneider-electric:meg6260-0415_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:meg6260-0415:-:*:*:*:*:*:*:*

Information

Published : 2019-09-17 13:15

Updated : 2022-11-30 13:47


NVD link : CVE-2019-6835

Mitre link : CVE-2019-6835


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

schneider-electric

  • meg6260-0410
  • meg6501-0001
  • meg6501-0002_firmware
  • meg6260-0415
  • meg6501-0002
  • meg6260-0410_firmware
  • meg6260-0415_firmware
  • meg6501-0001_firmware