CVE-2019-6839

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to upload a rogue file.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:schneider-electric:meg6501-0001_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:meg6501-0001:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:schneider-electric:meg6501-0002_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:meg6501-0002:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:schneider-electric:meg6260-0410_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:meg6260-0410:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:schneider-electric:meg6260-0415_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:meg6260-0415:-:*:*:*:*:*:*:*

Information

Published : 2019-09-17 13:15

Updated : 2021-09-14 05:32


NVD link : CVE-2019-6839

Mitre link : CVE-2019-6839


JSON object : View

CWE
CWE-434

Unrestricted Upload of File with Dangerous Type

Advertisement

dedicated server usa

Products Affected

schneider-electric

  • meg6260-0410
  • meg6501-0001
  • meg6501-0002_firmware
  • meg6260-0415
  • meg6501-0002
  • meg6260-0410_firmware
  • meg6260-0415_firmware
  • meg6501-0001_firmware